1. Introduction

MAX SEO (“we”, “us”, “our”) is a Google Chrome extension that provides on-page SEO analysis, technical SEO auditing, link analysis, image optimization tools, and Google Search Console integration. It is developed and maintained by MAX SEO (https://maxseo.vn).

This Privacy Policy describes in detail what data MAX SEO collects, how that data is handled and used, where it is stored, how long it is retained, how it is secured, and whether it is shared with any third parties. This policy applies to all users of the MAX SEO Chrome extension.

By installing and using MAX SEO, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with this policy, please uninstall the extension.

2. Data Collection and Handling

This section describes all categories of data that MAX SEO accesses or collects during its operation.

2.1 Personal Data We Do NOT Collect

MAX SEO does not collect any of the following data, either automatically or manually:

• Names, email addresses, phone numbers, or mailing addresses
• Browsing history, search queries, or browsing activity on other tabs/windows
• Authentication tokens, usernames, or passwords (except for the optional Google Service Account JSON key and third-party AI API keys provided entirely by you, as detailed in Sections 2.6 and 2.8)
• Financial or payment information
• IP addresses or geolocation data
• Health, biometric, or demographic information
• Cookies, tracking identifiers, or device fingerprints
• Communication data (emails, messages, contacts)

2.2 Data We Collect and Process Locally During SEO Analysis (User-Initiated)

When you actively trigger an SEO analysis by clicking the extension icon, the extension reads the following data from the current web page’s DOM (Document Object Model) of the active tab only:

• Meta tags (title, description, canonical URL, robots directives, viewport)
• Heading structure (H1–H6 tags and their content)
• Image elements and their alt attributes
• Internal and external hyperlinks
• Schema.org / Structured Data markup (JSON-LD, Microdata)
• Open Graph and Twitter Card meta tags
• Page performance metrics (Web Vitals)
• Word count and text content statistics

Purpose: This data is analyzed entirely within your browser (client-side) to generate SEO audit reports displayed in the extension popup. This data is NOT stored persistently and is NOT transmitted to any external server, including our own.

We collect and handle specific website content (DOM data) strictly locally on your device to provide the SEO analysis. This data is never transmitted to our servers.

2.3 Data Accessed on Google Search Console Pages

When you visit Google Search Console pages (https://search.google.com/search-console/*), the extension reads on-screen performance metrics (clicks, impressions, CTR, position) that are already displayed within the GSC web interface. The extension uses this data to display comparison percentage badges on the page.

Purpose: To enhance the GSC user interface with visual comparison indicators. This data is only read from the page you are currently viewing, is processed in real-time, and is never stored or transmitted externally.

2.4 Data Accessed via Image Save Feature

When you right-click an image and use the “Save Image As” context menu provided by MAX SEO, the extension:

• Fetches the image from its original source URL (the same URL your browser has already loaded)
• Converts the image format (JPG, PNG, or WEBP) and optionally resizes it based on your saved settings
• Prompts you to enter a filename and saves the result to your local device

Purpose: Image data is processed entirely in your browser using the HTML Canvas API for format conversion and resizing. No image data is uploaded to or processed by any external server.

2.5 Data Accessed on Google Search Results Pages

When you visit Google search results pages, the extension may enhance the SERP (Search Engine Results Page) with additional visual elements such as result numbering, nofollow link highlighting, and word count indicators.

Purpose: To provide SEO-related visual enhancements on search result pages. The extension reads the existing page content but does not collect, store, or transmit any search query or search result data.

2.6 User-Provided Data

You may voluntarily provide the following data through the extension interface:

• User preferences and settings: SERP enhancement toggles, image save settings (format, dimensions, quality)
• URL lists: Lists of URLs you enter for Google Search Console batch indexing or removal operations
• Google Service Account JSON key: If you choose to use the optional Google Indexing API feature, you may import a Google Service Account JSON key file

Purpose: User-provided data is stored locally on your device using chrome.storage.local and is used solely to provide the features you have chosen to use. This data is never transmitted to MAX SEO servers.

2.7 Automatically Collected Data

The extension does not run any background processes that collect data. All data access is triggered solely by your explicit actions (clicking the extension icon, using context menus, or interacting with the extension interface).

2.8 Data Transmitted via AI Features (User-Initiated)

If you choose to utilize the optional AI-assisted features within MAX SEO (such as AI content analysis or generation), you may be required to provide your own third-party AI API key (e.g., OpenAI API Key) and select an AI model. When you actively use this feature, the extension transmits your provided API Key, selected model, and the specific text/content you choose to analyze directly to the respective third-party AI provider’s API endpoints (e.g., api.openai.com). Purpose: To provide AI-powered SEO insights. This transmission occurs directly between your browser and the AI platform. MAX SEO does NOT route this data through our own servers, nor do we log, store, or intercept your API keys or messages. Your use of these AI features is subject to the privacy policy of the respective AI provider.

3. Data Handling and Use

This section explains how each type of data accessed by MAX SEO is handled and used:

Data Type	How It Is Used	Transmitted Externally?	Stored Persistently?
Web page DOM content	Analyzed in real-time to generate SEO reports displayed in the extension popup	No	No — discarded after analysis
Google SERP page content	Read to apply visual enhancements (numbering, highlights)	No	No — applied in real-time only
GSC page metrics	Read to display comparison percentage badges on the page	No	No — displayed in real-time only
Image data (Save Image As)	Fetched from original URL, converted locally via Canvas API, saved to your device	No	No — only saved as a file you download
User preferences/settings	Stored locally to remember your extension configuration	No	Yes — in chrome.storage.local
URL lists (GSC batch operations)	Stored locally for batch indexing/removal workflows	No — except when sent to Google Indexing API if you configure this feature yourself	Yes — in chrome.storage.local until you clear them
Service Account JSON key	Stored locally and used to authenticate with Google Indexing API on your behalf	Sent only to Google’s API endpoints (googleapis.com), as configured by you	Yes — in chrome.storage.local until you remove it
AI API Keys & Selected Content	Sent directly to third-party AI APIs (e.g., OpenAI) to generate insights, based solely on user prompts.	Yes — but ONLY directly to the third-party AI API endpoints requested by the user. NEVER to MAX SEO servers.	Yes — API keys are stored locally in chrome.storage.local until removed.

MAX SEO does not use any data for advertising, profiling, analytics, market research, or any purpose unrelated to the extension’s core SEO analysis functionality.

4. Data Storage and Retention

This section describes where and how data is stored by MAX SEO.

4.1 Storage Location

All persistent data is stored exclusively on your local device, within Chrome’s extension storage area (chrome.storage.local). No data is stored on any remote server, cloud service, database, or any infrastructure operated by MAX SEO or any third party.

The specific data stored locally includes:

• SERP settings: numbering, auto-load, nofollow highlight, word count preferences
• Image settings: preferred width, max height, quality, and format for the Image Save feature
• URL queue: lists of URLs for GSC batch indexing/removal operations
• API and Service Account credentials: Google Service Account JSON key and third-party AI API keys (only if you manually provide them for their respective features)

4.2 Data Retention and Deletion

Locally stored data persists until one of the following occurs:

• Extension uninstall: When you uninstall the MAX SEO extension, all locally stored data is automatically and permanently deleted by Chrome
• Manual clearing via Chrome: You can manually clear the extension’s data via Chrome’s settings (chrome://extensions → Details → Clear data)
• In-extension deletion: You can clear URL queues or remove your stored credentials (Service Account key, AI API keys) from within the extension’s interface at any time

Since no data is transmitted to external servers, there is no remote data to retain or delete. There is no data retention period because we do not store any data remotely.

4.3 Data Security

We take the following measures to protect your data:

• Sandboxed storage: All data remains within Chrome’s sandboxed extension storage, protected by Chrome’s built-in security model and isolated from other extensions and websites
• No remote transmission: Since no user data is transmitted over the network to our servers, there is no risk of data interception during transit to us
• Secure API communication: When the Google Indexing API or third-party AI features are used, all API requests are sent over HTTPS (encrypted) directly from your browser to their respective endpoints (e.g., googleapis.com, api.openai.com). No data passes through any MAX SEO server.
• No dynamic code execution: The extension does not use eval(), new Function(), or any remote code execution techniques
• Manifest V3 compliance: MAX SEO is built on Chrome’s Manifest V3 platform, which enforces the most restrictive security policies for extensions
• Transparent source code: The extension’s source code is not obfuscated and can be inspected at any time

5. Data Sharing

5.1 No Third-Party Data Sharing

We do not share any user data with third parties, with the sole exception of the user-initiated Google Indexing API and user-initiated Third-Party AI Platforms (as detailed in sections 5.3 and 2.8). We do not share data with:

• Advertising networks or ad services
• Analytics or tracking services (e.g., Google Analytics, Mixpanel, Amplitude, Segment)
• Data brokers or data resellers
• Social media platforms
• Any business partners or affiliates
• Any server or service operated by the developer (MAX SEO)

5.2 No Third-Party Code or SDKs

MAX SEO does not include or use any third-party code, SDKs, libraries, or services that collect, transmit, or process user data. The extension contains no third-party tracking pixels, web beacons, fingerprinting scripts, or any mechanism to transmit user data externally.

5.3 Google Indexing API (User-Initiated Only)

If you choose to use the optional Google Indexing API feature, the extension sends URL data directly to Google’s API endpoints (https://indexing.googleapis.com) using your own Service Account credentials. This communication is:

• Initiated solely by your explicit action (clicking the “Submit” button)
• Sent directly from your browser to Google’s servers over HTTPS
• Authenticated using credentials that you have personally provided
• Not routed through, intercepted by, or logged by any MAX SEO server

The only data sent to Google in this case is the list of URLs you have entered and your Service Account authentication token. No other user data is included in these requests.

5.4 Legal Disclosure

Since MAX SEO does not collect or store any user data on remote servers, we have no data to disclose in response to legal requests. In the unlikely event that we are required by law to disclose information, we would only be able to confirm that we do not hold any user data.

6. Limited Use Disclosure

Specifically, MAX SEO:

• Only uses data from Chrome APIs to provide or improve the extension’s user-facing SEO analysis features
• Does not transfer data to third parties except as necessary to provide the user-requested functionality (Google Indexing API and user-initiated Third-Party AI Platforms)
• Does not use data for advertising or serving advertisements
• Does not use data for creditworthiness or lending purposes
• Does not allow humans to read user data, except with the user’s affirmative consent, for security purposes, or to comply with applicable law

7. Permissions Justification

MAX SEO requests the following Chrome permissions. Each permission is used solely for the stated purpose and represents the minimum set of permissions required for the extension to function:

Permission	Why It Is Needed	Data Accessed
activeTab	Analyze SEO elements of the currently active tab when you click the extension icon	DOM content of the active tab (only when you click the icon)
tabs	Access tab URLs for the “Copy All URLs” feature and GSC batch operations	Tab URLs of the current browser window only
storage	Save user preferences, settings, URL queues, and Service Account keys locally	Extension settings stored in chrome.storage.local
sidePanel	Display the GSC batch operations dashboard in Chrome’s side panel	No additional data accessed
scripting	Inject the SEO analysis content script to read page data	DOM content of the active tab (only when triggered)
clipboardWrite	Copy SEO analysis results and URL lists to your clipboard	No data read — write only
contextMenus	Add right-click menu items for saving images in JPG/PNG/WEBP formats	Image URL that was right-clicked
host_permissions	Required to run content scripts for SEO analysis on web pages and to access Google Search Console pages	DOM content of pages you actively choose to analyze

8. User Consent and Control

By installing MAX SEO from the Chrome Web Store, you consent to the data practices described in this Privacy Policy. Chrome will display the permissions requested by the extension before installation, and you must accept these permissions to install the extension.

You have full control over your data at all times:

• Access: All data stored by MAX SEO is visible to you within the extension interface. You can view your saved settings, URL queues, and imported credentials at any time
• Modification: You can change any saved settings or preferences through the extension interface
• Deletion: You can delete specific data (URL queues, Service Account keys) from within the extension at any time. Uninstalling the extension automatically deletes all locally stored data
• Opt-out: You can disable any feature (SERP enhancements, GSC integrations, Image Save) at any time through the extension settings
• Permission control: You can review and revoke any Chrome permission at any time through Chrome’s extension settings (chrome://extensions)
• Data portability: Since all data is stored locally on your device, you inherently have full control and portability of your data

9. International Users and Compliance

MAX SEO is available to users worldwide. Since we do not collect, store, or process any personal data on remote servers, many traditional data protection concerns do not apply. However, we are committed to respecting user privacy rights globally:

• GDPR (EU/EEA users): Since MAX SEO does not collect or process personal data remotely, there is no personal data processing to report under GDPR. All data remains on your device under your control
• CCPA (California users): MAX SEO does not sell personal information. We do not collect personal information as defined by the CCPA
• Other jurisdictions: Our zero-collection approach means we comply with data protection laws in all jurisdictions by default

10. Children’s Privacy

MAX SEO is designed for adult professionals (18+) working in SEO, digital marketing, and website management. The extension is not directed at children under the age of 13 (or the applicable age of consent in your jurisdiction). We do not knowingly collect any information from children. If you believe a child has installed or used our extension, please contact us at maxseo.dichvu@gmail.com so we can address the situation.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our extension’s features or applicable regulations. When we make material changes, we will:

• Update the “Last Updated” date at the top of this page
• Update the extension’s version number in the Chrome Web Store
• Include a note about privacy policy changes in the extension’s changelog

We encourage you to review this policy periodically. Your continued use of the extension after any changes constitutes your acceptance of the updated Privacy Policy. If you disagree with any changes, you should uninstall the extension.

12. Contact Us

If you have any questions, concerns, complaints, or requests regarding this Privacy Policy, our data practices, or your data rights, please contact us through any of the following channels:

• Email: maxseo.dichvu@gmail.com
• Website: https://maxseo.vn
• Developer: MAX SEO (maxseo.vn)
• Chrome Web Store: MAX SEO – SEO Analysis Tool

We will respond to all privacy-related inquiries within 30 days of receipt.