Terms of Service

Last updated: 19 September 2026

These terms govern how you can use Traffalyzer: the website analysis, the dashboard, the AI assistant, the interfaces and the modules for content management systems. We have kept them as short and clear as we could.

This is an English translation for your convenience. The German version is legally binding; in case of doubt, it prevails.

§ 1 Scope and provider

Traffalyzer is provided by Santos Cid & Fischer GbR, Greveler Straße 39, 44329 Dortmund, Germany, email info@traffalyzer.com ("we"). Full provider details are in the legal notice. These terms apply to all contracts for the use of Traffalyzer, meaning the website traffalyzer.com, the dashboard, the REST API, MCP access and the connection via our modules and plugins. The data processing agreement at the end of this page is part of these terms. Your deviating terms only apply if we expressly agree to them in text form.

§ 2 Who Traffalyzer is for

Traffalyzer is aimed exclusively at customers who are not consumers: businesses within the meaning of § 14 of the German Civil Code (BGB), meaning companies, self-employed people, freelancers and agencies that use Traffalyzer for their commercial or independent professional activity, as well as legal entities and organisations such as associations, federations, foundations and public bodies. We do not conclude contracts with consumers, meaning people who want to use Traffalyzer for private purposes. That is why our prices are stated excluding VAT. Before taking out a paid subscription, you expressly confirm that you are not acting as a consumer. We rely on this statement. We may ask for proof, such as a VAT identification number or evidence of a trade, professional or association registration. If you do not provide it within 14 days, or if it turns out that your statement is not true, we may terminate the contract for good cause without notice. We refund on a pro rata basis anything you have already paid for the period after termination. You also create a free account only for professional purposes or for an organisation. Anyone may use the free check of a single page without an account (§ 9).

§ 3 Conclusion of contract and account

You can use the free check of a single page without an account. For everything else, you create an account by signing in with your email address or your Google account. When you sign up, we point you to these terms. Signing up concludes a contract for free use on these terms. You take out a paid subscription in the dashboard. Before booking, we point you to these terms again. For your first subscription, the contract is concluded as soon as you complete the order with the payment provider Stripe. If you add another domain to an existing subscription, the contract for that domain is concluded as soon as you confirm the booking in the dashboard with the button for a paid booking. An added domain runs within the shared billing period of the subscription (§ 6). You can access, save and print the current version of these terms at any time at traffalyzer.com/en/terms. Because you are not acting as a consumer, we agree that the obligations under § 312i (1) sentence 1 nos. 1 to 3 BGB do not apply. Your details must be accurate, and you keep them up to date. You may let employees or agents working for you use your account. You are responsible for their actions as for your own. Please tell us immediately if you suspect that someone unauthorised is using your access.

§ 4 Services

Traffalyzer analyses websites and turns the results into concrete suggestions. This includes in particular a crawler that checks the pages of a domain technically, connections to data sources such as Google Search Console, Google Analytics 4, Plausible, Fathom and Matomo, a growth plan, quests, email reports, an AI assistant, interfaces (REST API and MCP) and modules for content management systems. Free: With a free account you can add domains, start scans yourself and use part of the analyses. Which features the free tier includes is shown on the website and in the dashboard. There is no entitlement to the free tier staying the same forever. Pro: The paid subscription applies per domain and unlocks the full feature set for that domain, as described on the pricing page and in the booking dialog at the time of booking, within the limits set out in this section. This includes an automatic full scan of the domain, weekly, every 14 days or monthly as you choose, and a daily check of up to 20 pages, the homepage and the most visited pages, for deterioration. If we unlock Pro features for you free of charge, for example via an invitation or a promotion, you get the Pro scope for them. For liability (§ 14) and termination (§ 8), however, the rules for the free tier apply unless we tell you otherwise. The trial under § 7 does not count as such. Limits: A scan covers up to 2,000 pages per domain. Some features have daily quotas so that individual automated processes do not slow the service down for everyone else. Currently the AI assistant answers up to 200 questions per day per account when you ask about a Pro domain, and up to 20 questions per day when you ask about a free domain. Both count together. For the interfaces, § 12 applies. A day ends at midnight UTC, after which the full quota is available again. If we lower any of these limits for running subscriptions, we announce it by email at least six weeks in advance, and you can end the subscription as of the date of the change. The numbers and rankings your website achieves depend on many things neither you nor we control, search engines above all. We therefore do not owe any particular result.

§ 5 Availability and changes to the service

We do our best to keep Traffalyzer available around the clock. However, we do not guarantee any specific availability. Maintenance, updates, outages at our service providers (such as hosting, database or Google) and events beyond our control may temporarily limit the service. Traffalyzer keeps evolving. We may change, add or replace features if there is a valid reason for it, such as technical development, security, a change in the law or changes to third-party services a feature depends on, and as long as the core of what you booked remains. If an essential feature of a paid subscription is removed, we will tell you by email at least six weeks in advance, and you can end the subscription as of the date of the change. If the removal is due to a change by a third party that we could not know about in time, for example if Google shuts down an interface at short notice, we inform you without undue delay, and you can end the subscription with immediate effect. We then refund the remaining term on a pro rata basis.

§ 6 Prices and payment

The Pro subscription costs €5 per domain per month plus statutory VAT. The price shown at the time of booking applies. Billing is in euros. We show VAT on the invoice where it applies. If you provide a valid VAT identification number from another EU member state, the tax liability may pass to you (reverse charge). Billing is handled by the payment provider Stripe. You pay with one of the payment methods offered during checkout. The amount is due at the start of each billing period for that period. We issue invoices electronically. You can find them in your account under "Manage subscription". All paid domains of an account run in one shared subscription. If you add another domain, we charge it pro rata for the current period and in full from the next period. We invoice the pro rata amount with the next invoice. If a payment fails or is charged back, we inform you. Our payment provider retries a failed collection over the following days. Until the outstanding amount has been paid, we may suspend the Pro features. If it has not been paid three weeks after the due date despite a reminder, we may end the subscription. We then downgrade the affected domains to the free tier. They remain in your account with their data, and you can book them again at any time. We may change prices for running subscriptions for future billing periods, for example if our costs for hosting, data sources or AI models rise. We announce a price increase by email at least six weeks before it takes effect. If you do not agree, you can cancel the subscription before it takes effect, including for individual domains. We expressly point this out in the announcement. If you do not cancel, the new price applies from the announced date.

§ 7 Free trial

With the first Pro subscription of an account, you can try Traffalyzer free of charge for seven days. For the trial, you provide a payment method. If you cancel before the seven days are up, you pay nothing. Otherwise the trial automatically turns into the paid subscription, and the first payment is due at the end of the trial. If you cancel during the trial, the subscription ends when the trial ends. The domain is then deleted together with its data, as after a cancellation (§ 8). The trial is available once per account. Anyone who has had a subscription before starts without a trial.

§ 8 Term and cancellation

The Pro subscription runs for one month at a time and renews automatically for another month. You can cancel it at any time effective at the end of the current billing period, for individual domains or entirely. You can do this in the dashboard with a few clicks or in text form, for example by email to info@traffalyzer.com. The domain remains fully usable until the end of the paid period. After that, we delete the cancelled domain together with its data, meaning crawls, history, suggestions, badges and streaks. We do not offer a separate export function. Until then, you can view findings, plans and metrics in the dashboard and retrieve them via the interfaces (§ 12). Reports we have sent you by email remain yours. You can delete your account yourself at any time. This also ends the contract for free use. If you still have a running subscription, it ends immediately upon deletion. There is no refund for the remaining term. To avoid this, cancel the subscription first and delete the account after the paid period has ended. We may terminate the subscription in text form with one month's notice to the end of a billing period. We may end or discontinue free access with one month's notice. The right of both parties to terminate for good cause remains unaffected. For us, good cause exists in particular if you commit a material breach of § 9, or repeated breaches despite a warning, or if your statement under § 2 is not true.

§ 9 Your obligations

Domains you add to your account must belong to you, or the owner must have authorised you to have them scanned regularly with Traffalyzer and to connect their data sources. If you work for clients, for example, you clarify this with the client. You do not add third-party websites, such as those of competitors, as domains. We may ask for proof of authorisation and stop scanning a domain if its owner objects. You may use the free check without an account for any publicly accessible website, including third-party ones. It only checks the page entered and, like an ordinary visitor, retrieves publicly available content such as the page itself, the robots.txt or the sitemap. Do not use it in an automated way or on a mass scale. The interfaces under § 12 exist for that. You do not misuse Traffalyzer. In particular: no scans intended to overload third-party servers, no circumvention of quotas, access protection or security measures, no mass automated extraction from our services outside the interfaces provided for that purpose, and no use for unlawful purposes. You keep API keys and login details secret. A key applies to exactly one domain. If one falls into the wrong hands, you revoke it in the dashboard under Integrations. You are responsible for calls made with your key until you have revoked it. If you violate these obligations, we may block individual features or keys to the extent necessary to stop the violation or prevent damage. We only block the entire account in the event of a material breach. Where circumstances allow, we will let you know in advance and give you the opportunity to clear things up. We lift the block as soon as the reason for it no longer applies. If you are responsible for the block, the fees remain payable. If you culpably violate these obligations and third parties bring claims against us as a result, you indemnify us against these claims, including reasonable costs of legal defence.

§ 10 The crawler

For a scan, our crawler requests publicly accessible pages of the domain, just like a visitor who is not logged in. It identifies itself with its own user agent, never logs in, does not circumvent any access protection and respects the domain's robots.txt, with one exception: for a scan, it requests the homepage once even if the robots.txt excludes it, because no analysis is possible without it. Exactly how it works and how you can exclude individual areas is explained on the crawler page. You make sure that scans of your domains are compatible with how they are operated, for example with firewalls, access protection or agreements with your host. If your website blocks the crawler, results may be incomplete or missing.

§ 11 AI features

Some texts in Traffalyzer are created with the help of AI models, for example the assistant's answers, parts of the growth plan and wording suggestions. For this we use language models from external providers. Which data is transmitted in the process is explained in the privacy policy. What we owe is that we generate these texts with a current language model suitable for the purpose, based on your data, not that every suggestion is correct. AI texts can be incomplete, outdated or wrong. They are suggestions, not advice. Check them before you apply or publish them on your website. You are responsible for the content you publish.

§ 12 Interfaces, modules and plugins

Via the REST API and MCP access you can connect Traffalyzer to other systems and AI assistants. Both share one daily quota per user: currently 200 calls per day on the free tier and 2,000 calls per day when the call concerns a Pro domain. Once the quota is reached, we reject further calls until the next day (UTC). § 4 applies to changes to the quotas. If you connect another system via the API or MCP, such as an AI assistant, we transmit the retrieved data to that system. You initiate this transmission. You are responsible for the system and how it handles the data. There is a module for Drupal and a plugin for WordPress. An overview is available under Integrations. We provide the modules free of charge under the licence stated in the respective project, currently the GNU General Public License version 2 or later. For the modules themselves, we are liable as for the free tier (§ 14). Using Traffalyzer via a module is governed by these terms. At your instigation, a module can make changes in your system, for example create redirects or serve an llms.txt. You decide what you adopt, and you back up your system appropriately beforehand. Connected third-party services such as Google Search Console or Google Analytics are additionally subject to their own terms. You can disconnect any connection at any time.

§ 13 Your data and our rights

The data of your website and your connected sources remains yours. You allow us to process it to the extent necessary to provide Traffalyzer to you. In addition, we may evaluate technical findings from scans, such as missing titles or broken links, in aggregated, statistical form and without the addresses of individual pages to improve the service. These evaluations contain no personal data and identify neither you nor your website. We do not use data from connected sources such as Google Search Console, Google Analytics, Plausible, Fathom or Matomo for this. We do not sell data. The software, the interface, the texts and the Traffalyzer brand belong to us or our licensors. For the duration of the contract, you may use Traffalyzer to the agreed extent. You may freely use the results of your analyses, such as reports and findings, including with your clients.

§ 14 Liability

We are liable without limitation for intent and gross negligence, for injury to life, body or health, under the German Product Liability Act, for fraudulently concealed defects and to the extent we have given a guarantee. In case of slight negligence, we are only liable if we breach an essential contractual obligation, meaning an obligation whose fulfilment makes the contract possible in the first place and on which you may regularly rely. In this case, liability is limited to the damage typical for the contract that was foreseeable when the contract was concluded. For defects that already existed when the contract was concluded, we are only liable if we are responsible for them. Strict liability under § 536a (1) BGB is excluded. For the loss of data in your own systems, for example after changes made by a module, our liability for slight negligence is limited to the effort that would have been needed to restore the data had you backed it up appropriately. For the free tier, the free check, Pro features unlocked free of charge (but not the trial under § 7) and the modules, we are only liable in the cases of the first paragraph. Otherwise, liability is excluded. These rules also apply to the personal liability of our employees, legal representatives and vicarious agents.

§ 15 Data protection

How we handle personal data is described in the privacy policy. Where we process personal data on your behalf when you use Traffalyzer, for example personal information on the pages of your website, data our modules transmit from your content management system, or personal information in data from connected sources, we act as your processor. The data processing agreement at the end of this page applies to this. It is part of these terms and applies from the conclusion of the contract. It contains the list of our sub-processors and our technical and organisational measures. You are responsible for the lawfulness of the data you give us for processing. Report recipients you add confirm receipt with us themselves (double opt-in). We are responsible for this ourselves. You make sure that you are allowed to add the person.

§ 16 Changes to these terms

We may change these terms with effect for the future if laws or case law change, if a provision has become invalid due to law or case law and we replace it with a provision that corresponds to the statutory rule or does not put you in a worse position, or if we introduce new features not covered so far. The change must not unreasonably disadvantage you. We do not change the main services or the prices this way. §§ 4, 5 and 6 apply to those. We send you the new version by email at least six weeks before it takes effect, together with an overview of the changes. You can object in text form until it takes effect. If you do not object, the new version applies from the stated date. We expressly point out the deadline, your right to object and this consequence in the email. If you object, the previous version continues to apply to you. You may then terminate the contract at any time, and we may terminate it with ordinary notice under § 8.

§ 17 Final provisions

German law applies, excluding the UN Convention on Contracts for the International Sale of Goods. If you are a merchant, a legal entity under public law or a special fund under public law, or if you have no general place of jurisdiction in Germany, the place of jurisdiction for all disputes arising from this contract is Dortmund, Germany, to the extent such an agreement is legally permissible. We may also sue at your registered office. Exclusive statutory places of jurisdiction remain unaffected. The contract language is German. Translations are for information only. In case of doubt, the German version prevails. If any provision is invalid, the remaining provisions remain valid. The invalid provision is replaced by the statutory rule.

Annex: Data processing agreement (Art. 28 GDPR)

This agreement applies between you as the controller and us, Santos Cid & Fischer GbR, as the processor. It is part of the terms above and applies from the conclusion of the contract, including for the free account. We use terms as defined in the General Data Protection Regulation (GDPR).

1. Subject matter and duration

The subject matter is the processing of personal data that arises on your behalf when we provide Traffalyzer under these terms (processed data). The agreement runs for as long as the contract for the use of Traffalyzer and beyond that for as long as we still process processed data.

2. Nature and purpose, data and data subjects

Nature and purpose: We retrieve, store, evaluate and display data in order to analyse your domains, create findings, plans, suggestions and reports and provide the results to you in the dashboard, by email and via the interfaces. Types of data: personal information on the pages of your website, such as names, roles, contact details and images of people as well as addresses and titles of pages containing names; data our modules transmit from your content management system, such as addresses, titles and status of content and editing events, for the Drupal module also revision notes; personal information in data from connected sources, such as Google Search Console queries containing names. Data subjects: people named or pictured on your website, people who edit content in your content management system, and visitors to your website to the extent that data from connected sources can be related to them. Not covered is data for which we are responsible ourselves, such as your account, billing, report recipients, your conversations with the AI assistant and our logs. The privacy policy applies to that data.

3. Instructions

We process processed data only on your documented instructions, including with regard to transfers to a country outside the EU, unless EU or member state law requires us to process it. In that case we inform you beforehand, unless the law prohibits this. Your instructions result from these terms, from your settings in the dashboard and from the features you use. You give further instructions in text form to info@traffalyzer.com. If we consider an instruction unlawful, we tell you without undue delay and may suspend it until you confirm or change it.

4. Confidentiality

People at our company who have access to processed data are committed to confidentiality or are under a statutory obligation of confidentiality. They process the data only on your instructions.

5. Security of processing

We take the technical and organisational measures under Art. 32 GDPR described in Annex 2. We may develop them further as long as the level of protection does not decrease.

6. Sub-processors

You authorise us to use the sub-processors listed in Annex 1. We announce new or replaced sub-processors to you by email at least four weeks in advance. Within this period you can object in text form for an important reason relating to data protection. If we do not find a solution, either party may terminate the contract as of the date of the change. We contractually bind every sub-processor to the obligations of this agreement and are liable to you for it as for ourselves. Transfers to countries outside the EU and the EEA only take place if the requirements of Arts. 44 to 49 GDPR are met.

7. Assistance

We assist you with appropriate technical and organisational measures in responding to requests from data subjects (Arts. 12 to 23 GDPR) and in meeting your obligations under Arts. 32 to 36 GDPR, for example with notifications of data breaches and with data protection impact assessments. If a data subject contacts us about processed data, we forward the request to you without undue delay.

8. Personal data breaches

If we become aware of a breach of the security of processed data, we inform you by email without undue delay. We provide the information under Art. 33(3) GDPR to the extent available to us and take the necessary measures to secure the data and mitigate adverse effects.

9. Deletion and return

At the end of the processing, we delete the processed data unless there is a legal obligation to retain it. For a domain this is the time set out in § 8 of the terms, for the entire account its deletion. Until then, you can view the data in the dashboard and retrieve it via the interfaces. This is how we return it to you; we do not owe any further handover. Copies in our database provider's backups are overwritten in the regular backup cycle.

10. Evidence and audits

On request, we provide you with the information you need to demonstrate compliance with this agreement. As a rule, this agreement, the description of our measures and evidence from our sub-processors such as certificates or audit reports are sufficient. In addition, we allow for and contribute to audits by you or an auditor mandated by you who is bound to confidentiality. You announce an audit with reasonable notice, as a rule four weeks. It takes place during our business hours without disrupting operations. You bear its costs unless it reveals a material breach on our part.

11. Final provisions

In the event of contradictions, this agreement takes precedence over the other terms in matters of data protection. Art. 82 GDPR applies to liability towards data subjects; between you and us, § 14 of the terms applies otherwise. Changes to this agreement are governed by § 16 of the terms, changes to sub-processors by section 6.

Annex 1: Sub-processors

Supabase, Inc. (USA): database in which all processed data is stored. The database is located in a data centre in London (United Kingdom), for which an adequacy decision of the EU Commission applies. Where Supabase accesses it from other countries, for example for support, on the basis of standard contractual clauses. Vercel Inc. (USA): hosting of the website and the application, processing of requests to the dashboard and interfaces. Processing in data centres in the EU or the USA; for transfers to the USA on the basis of the EU-US Data Privacy Framework or standard contractual clauses. Hetzner Online GmbH, Gunzenhausen (Germany): servers in Germany for our own instance of Trigger.dev, on which scans, evaluations and the sending of reports run in the background. Anthropic (USA): language models for the growth plan, suggestions, translations and the AI assistant. We transmit content and findings of scanned pages and data from connected sources to the extent a feature needs them. For transfers to the USA on the basis of the EU-US Data Privacy Framework or standard contractual clauses. Sendinblue GmbH (Brevo), Berlin (Germany): sending of email reports that may contain findings about your pages. Processing in the EU. Stripe is not listed because it holds no processed data, only billing data for which we are responsible ourselves. To measure loading times, we transmit the addresses of publicly accessible pages to Google PageSpeed Insights (Google Ireland Limited).

Annex 2: Technical and organisational measures

Data centres: We do not operate our own server rooms. All systems run at the providers listed in Annex 1, whose data centres and processes are audited against recognised standards such as ISO 27001 or SOC 2. Encryption: Connections to the website, dashboard and interfaces and between our systems are encrypted via HTTPS (TLS). The database is encrypted at rest. We store API keys only as hash values. Access: Users sign in with a code or link sent by email or via Google; we do not store passwords. Each account only sees its own domains, which the application checks on every access. Only the partners have administrative access to the database and servers, using personal accounts. Access keys for services are kept in protected environment variables, not in the source code. Abuse protection: Sign-in, the free check, the AI assistant and the interfaces are rate-limited. Availability: The application runs on Vercel's scaling infrastructure. Our database provider backs up the database regularly. Deletion: We remove cancelled domains and deleted accounts automatically. The deletion periods set out in the privacy policy apply to logs. Organisation: We also select sub-processors based on their security credentials and conclude agreements under Art. 28 GDPR with them. We review these measures regularly, at least once a year and whenever there are significant changes.