Privacy

Link Finder reads public pages, suggests links, and changes nothing. This page says exactly what happens to the things you give it.

Your draft never leaves your browser

If you paste a draft, it is not uploaded. We send your browser a list of your own scanned pages — their titles, URLs, headings and a set of keywords from each — and the matching runs on your device, in the page you already have open. There is no field in our API that accepts draft text, so there is nothing for us to log even by mistake.

What we read from your site

Only public pages, over HTTPS, and only after checking your robots.txt. If your robots file disallows us, we stop. If we cannot read it — a server error, a timeout — we also stop, rather than assume permission. We identify ourselves on every request as:

CoreAEXLinkFinder/1.0 (+https://linkfinder.coreaex.com/)

We read at most 60 pages by default and never more than 120, for at most 90 seconds, pausing between requests. We never submit a form, sign in, or request anything that is not a page or a sitemap.

What we never do

• We never write to your site. There is no code here that sends anything but a GET.
• We never send your pages or your draft to an AI service. The suggestions come from rules, not a model.
• We never ask for an account, an email address, or a password.

Results live for 15 minutes

A finished scan is held in the server's memory for 15 minutes so your browser can fetch it, and is then discarded. It is never written to a database or to disk. If you reload the page after that, the results are genuinely gone — we cannot recover them, and neither can anyone else.

What we keep for 30 days

Four things per scan, and no more:

• a one-way hash of your IP address, salted with a secret that is not stored alongside it;
• the hostname you scanned;
• the time;
• how many pages were read.

That is what enforces the limit of 3 scans an hour and 10 a day, and it is what lets us answer a site owner who asks why we visited. Rows older than 30 days are deleted. We keep no page content, no URLs of the pages read, and no drafts.

If you would rather we did not scan your site

Two ways, both of which we honour. Disallow CoreAEXLinkFinder in yourrobots.txt, which we check before every request. Orask us directly and we will add your hostname to a blocklist that refuses a scan before any request is made.

Analytics

There are none on this tool. No tag manager, no product analytics, no session recording. You type your own domain and sometimes your own unpublished writing into this page; none of that belongs in a third party's dashboard.