CitedScoreCitedScoreJoin the waitlist
Legal · CitedScore

Privacy Policy

Effective: September 19, 2026

Who operates this site

CitedScore is operated by Park Properties, LLC, a North Carolina limited liability company. When this policy says "we," "us," or "our," it refers to Park Properties, LLC.

Contact: [email protected]

What we collect

We collect only what we need to deliver the service and improve the site.

Information you provide

  • Email address when you sign up for the waitlist, run a free scan (after you confirm your email), or create an account. Stored by Kit (ConvertKit), our email service provider.
  • Payment information when you purchase a report. Processed by Stripe. We never see or store your card number.
  • Domain URL when you submit a site for audit.

Information collected automatically

  • Analytics data: page views, session duration, referral source, device type, and general geographic region. Collected via Google Analytics 4, loaded through Google Tag Manager. Google Analytics uses your IP address to derive that approximate location and does not log or store the address itself. Data is retained for 14 months.
  • IP address: your IP address is visible to the services that deliver and protect this site. Cloudflare and Netlify receive it with every request in order to route and serve the page. Cloudflare Turnstile receives it when it verifies that a form submission came from a person rather than a bot. Our rate limiter stores only a scrambled, irreversible fingerprint of it, never the address itself, and discards that within minutes.
  • Session recordings and heatmaps: mouse movements, clicks, and scroll behavior. Collected by Microsoft Clarity and by Hotjar, both loaded through Google Tag Manager. Both tools mask sensitive input fields (email, password, payment) by default. No keystrokes are recorded in form fields.
  • Cookies: we use first-party cookies set by Google Analytics, Google Ads, Microsoft Clarity and Hotjar, plus two of our own: one that remembers which page and source first brought you here, and one that carries your purchase confirmation back from Stripe. See the Cookies section below for details.

How we use your information

  • To deliver your AI visibility report.
  • To send you product updates if you joined the waitlist, confirmed a free scan, or created an account (you can unsubscribe at any time).
  • To process payments through Stripe.
  • To understand how visitors use the site so we can improve it.
  • To measure which of our Google ads lead to a purchase.
  • To diagnose technical issues.

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

Third-party services

We use the following services to operate CitedScore. Each has its own privacy policy governing how it handles your data:

The services above are the ones that handle data from visitors to this website. The complete list of sub-processors, including the AI providers our audit engine calls, is maintained at Sub-processors and dated on each revision.

Cookies

CitedScore uses the following cookies:

  • Google Analytics cookies (_ga, _ga_*) for distinguishing unique visitors and sessions. First-party. Expire after 2 years (visitor) and 24 hours (session).
  • Google Ads conversion cookie (_gcl_au) for linking a purchase to the Google ad click, if any, that brought you to the site, so we can measure which ads lead to a purchase. An advertising cookie, set on our domain by Google's tag. First-party. Expires after 90 days.
  • Hotjar cookies (_hjSession_*, _hjSessionUser_*) for tying a session recording together and recognizing a returning visitor. First-party. Expire after 30 minutes (session) and 1 year (visitor).
  • Microsoft Clarity cookies (_clck, _clsk) for recognizing a returning visitor and tying the pages of one visit into a single session recording. First-party. Expire after 1 year (visitor) and 1 day (session).
  • First-touch cookie (cs_ft) for remembering which page and source first brought you to the site, so that a later purchase can be attributed to that source. Set by us, not by a third party. It holds the campaign tags from the address you arrived on, the site that referred you, the page you landed on (with any shared-report or verification code in it masked before it is stored) and ad click identifiers (gclid, fbclid, msclkid: the tags an advertising platform adds to an ad link). It is not designed to hold a name, an email address or payment details: anything shaped like an email address is dropped before it is stored, and campaign tags are otherwise stored exactly as the link that brought you here spelled them. Sent to Stripe with your payment. Kept for up to 90 days; some browsers expire it sooner.
  • Purchase confirmation cookie (cs_purchase) for carrying the amount you paid from Stripe back to our confirmation page. Set by us. Expires after 5 minutes.

Apart from the Google Ads cookie above, we do not use advertising cookies. Google Signals is enabled on our Google Analytics property: if you are signed in to a Google account with Ads Personalization turned on, Google may associate your visit here with that account and with your activity on your other devices. You can turn that off in your Google account's Ads Personalization settings. Most browsers also allow you to block or delete cookies through their settings.

Data retention

  • Email address: retained until you unsubscribe or request deletion.
  • Analytics data: retained for 14 months in Google Analytics, then automatically deleted.
  • Session recordings: retained per each provider's standard retention period, typically 30 days for Microsoft Clarity and 365 days for Hotjar.
  • Audit data: retained as long as your account is active. You can request deletion at any time. Completed reports are not emailed as attachments; the notification email links to your report page, which requires signing in to view.
  • Payment records: retained as required by tax and financial regulations.

Your rights

You can:

  • Unsubscribe from emails at any time using the link in any email.
  • Request a copy of your personal data.
  • Request deletion of your personal data.
  • Request correction of inaccurate data.
  • Opt out of the sale or sharing of your personal information (see below).

To exercise any of these rights, email [email protected]. We will respond within 45 days as required by applicable law. If we need additional time, we will notify you of the extension and the reason.

We will not discriminate against you for exercising any of these rights.

California privacy rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with specific rights regarding your personal information.

Categories of personal information we collect

  • Identifiers: email address, domain URL.
  • Commercial information: purchase history, subscription plan.
  • Internet or electronic network activity: pages viewed, session duration, referral source, device type, browser type, interactions with the site (clicks, scrolls, mouse movements via Clarity).

How we use these categories

We use the categories listed above to deliver the service, process payments, communicate with you about your account, and improve the site. See the "How we use your information" section above for specifics.

Sale and sharing of personal information

We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. We have not sold or shared personal information in the preceding 12 months.

Your California rights

  • Right to know: you can request the categories and specific pieces of personal information we have collected about you, the sources, the business purposes, and the categories of third parties with whom we share it.
  • Right to delete: you can request deletion of personal information we have collected, subject to certain exceptions (such as completing a transaction or complying with legal obligations).
  • Right to correct: you can request correction of inaccurate personal information.
  • Right to opt out of sale or sharing: we do not sell or share your data, but you may submit a request at any time to confirm this status.
  • Right to limit use of sensitive personal information: we do not collect sensitive personal information as defined by the CPRA.

To exercise any of these rights, email [email protected] with the subject line "California Privacy Request." We will verify your identity before processing the request. You may also designate an authorized agent to make a request on your behalf.

Do Not Sell or Share My Personal Information

We do not sell or share your personal information as defined by the CCPA/CPRA. No opt-out mechanism is required because no sale or sharing occurs. If this changes in the future, we will update this policy and provide the required opt-out mechanism before any sale or sharing begins.

Children

CitedScore is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of the site after changes constitutes acceptance of the revised policy.

Contact

Questions about this policy: [email protected]

Privacy Policy | CitedScore