What we collect and why.

SiteCrumb (sitecrumb.com) is a website analytics service: traffic statistics, heatmaps, session recordings, feedback and surveys for the websites our customers add to it. This policy covers the people who have a SiteCrumb account, the visitors of websites that use SiteCrumb, and the data SiteCrumb reads from Google when a customer connects Google Search Console.

Your SiteCrumb account

When you sign up we store your email address, your name if you give one, and your password as a one-way hash. If you turn on two-factor authentication we store its secret encrypted. We keep a record of your logins and of changes made in your workspace (who did what, when, and from which IP address) so you and your team can review them, and a session cookie keeps you logged in to the dashboard.

We use this to run your account and to send you email about it, such as the link that confirms your address and the alerts and reports you turn on. We do not send marketing email you did not ask for.

Visitors of sites that use SiteCrumb

A customer adds our script to their website. For each visit it collects the pages viewed, the referring page and campaign tags, the type of device, browser and operating system, the country and city as reported by our network provider, clicks, scrolling and, where the customer turns them on, session recordings and feedback or survey answers. Recordings mask what visitors type into form fields, and customers can mask more text.

The script uses no cookies. It keeps a random visitor identifier in the browser's local storage so repeat visits can be recognized. We do not store visitors' IP addresses with this data; they are used only briefly to limit abuse. We do not combine data across customers' websites or use it to build profiles of people.

For this data the website owner decides what is collected and why; we process it on their behalf. If you visited a website and want your data removed, ask its owner, or write to us.

Google Search Console data

A customer can connect a Google account to see which Google searches led people to their website. This uses the Google Search Console API with read-only access (the webmasters.readonly scope) and asks for the account's email address.

What we access

• The list of Search Console properties the Google account can read, so the customer can pick the one that belongs to their website.
• For that one property: search queries, landing pages, clicks, impressions, click rate and average position, per day.
• The Google account's email address, to show which account is connected.

We cannot change anything in Search Console, and we do not read any other Google data.

What we store

• The OAuth refresh token, encrypted, so we can fetch new numbers every few hours.
• The connected account's email address and the chosen property.
• The daily search numbers listed above, for as long as the customer's plan keeps data (30 days to 1 year), and at most the 16 months Search Console itself provides.

How we use it

Only to show these numbers to the members of the customer's own SiteCrumb workspace, in the dashboard and in exports they make. We do not sell Google user data, share it with anyone else, use it for advertising, or use it to train AI or machine-learning models. Nobody at SiteCrumb looks at it unless the customer asks us to for support, or the law or the security of the service requires it.

SiteCrumb's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Removing it

Click Disconnect on the site's Google search page: we delete the stored token and every search number fetched for that site, and withdraw our access at Google unless another of your sites still uses that Google account. You can also remove SiteCrumb's access at any time from your Google account permissions. Deleting a site deletes its Search Console data with it.

Who else handles data

We do not sell personal data. We use a few providers to run the service: Cloudflare carries traffic to our servers, and Resend delivers our email. They handle data only to provide that service to us.

How long we keep it

Analytics data, recordings, feedback, survey answers and Search Console numbers are deleted automatically once they are older than the workspace's plan allows: 30 days on Free, 90 days on Starter, 6 months on Growth and 1 year on Scale. Deleting a site deletes all of its data. Account data is kept while the account exists.

Your choices and rights

You can see, correct and export your data from the dashboard, and delete sites and their data there. To delete your account, or for any other request about your personal data, write to [email protected].

Changes

If we change this policy we update the date at the top of this page.