Privacy Policy

Last updated: August 7, 2026

This Privacy Policy explains what data Smart Analytics (smartanalytics.site) collects, how it is used, and your rights. The short version: I collect almost nothing.

1. What I do NOT collect

  • I do not collect your name, address, phone number, or payment information
  • I do not require an account or login
  • I do not use tracking cookies or fingerprinting
  • I do not build user profiles
  • I do not sell, rent, or share personal data with third parties
  • I do not store the URLs you scan on the server (results exist only in your browser)

2. What I do collect

Google Analytics (GA4)

I use Google Analytics to understand how many people use the tool and which features they find useful. GA4 collects:

  • Anonymous page view data
  • General geographic region (city-level, not precise location)
  • Device type and browser
  • Referral source (how you found the site)

GA4 does not identify you personally. I cannot see who you are from this data. Google processes this data under their own privacy policy.

Email (optional, only if you provide it)

If you voluntarily provide your email address for weekly reports or feature notifications, I store it in a database (Turso) for the sole purpose of sending you the reports you requested. I do not use your email for marketing, newsletters, or anything you did not ask for. You can unsubscribe from any email with one click.

Anonymous site category

When you scan a website, I detect the general industry category (such as "ecommerce" or "healthcare") and log it anonymously via GA4. I do not log the actual URL you scanned. This helps me understand what types of businesses use the tool so I can improve it.

3. Data processing

When you scan a URL, the tool fetches that URL's public HTML from the server side, analyzes it, and returns the results to your browser. The HTML is not stored. The results are not stored on the server. When you close the tab, the results are gone.

If you subscribe to weekly reports, your email and the URL you chose are stored in a database hosted by Turso (turso.tech) in their US infrastructure. This data is used only to send your weekly report.

4. Third-party services

  • Google Analytics (GA4): anonymous usage data
  • Vercel: hosting provider (processes requests)
  • Turso: database for email subscriptions
  • Brevo: email delivery for weekly reports
  • Google Gemini API: AI-powered competitor analysis (page content is sent to Google for processing)

Each of these services has their own privacy policy. I choose services with strong privacy practices and free tiers that do not require me to share user data beyond what is necessary for the feature to function.

5. AI data processing

When you use the "Find My Competition" feature, the publicly available content of the website you scanned is sent to Google's Gemini AI for analysis. This is necessary for the AI to understand what your business does and suggest competitors. I do not send any personally identifiable information to the AI. Only publicly visible webpage content is processed.

6. Cookies

Smart Analytics does not set its own cookies. Google Analytics may set a first-party measurement cookie (_ga). No advertising cookies, no third-party tracking cookies.

7. Your rights

You have the right to:

  • Know what data I hold about you (if you gave an email, that is what I have)
  • Request deletion of your email from the weekly reports database
  • Unsubscribe from emails at any time with one click
  • Use the tool without providing any personal information

If you are in the EU, you have additional rights under GDPR including data portability and the right to lodge a complaint with a supervisory authority. Since I hold minimal data (an email if you chose to provide one), exercising these rights is straightforward.

8. Data retention

Email subscriptions are retained until you unsubscribe. Feature requests on the wishlist are retained indefinitely for product development purposes. Anonymous GA4 data is retained according to Google's default settings (14 months).

9. Children

This tool is not directed at children under 16. I do not knowingly collect data from children.

10. Security

The site uses HTTPS encryption. Database access is restricted by authentication tokens. I take reasonable measures to protect any data I hold but cannot guarantee absolute security (no one can).

11. Changes

I may update this policy. The "Last updated" date at the top will change when I do. Material changes will be reflected here.

12. Contact

Privacy questions: reports@smartanalytics.site

Data Processing Agreement (DPA)

Smart Analytics does not process personal data on behalf of other organizations. There is no controller-processor relationship because the tool does not collect or store personal data beyond voluntary email subscriptions. A formal DPA is not applicable. If you need written confirmation that your users' data is not stored when using this tool, contact me directly.

Refund Policy

There is nothing to refund. Smart Analytics is free. No payments are collected, no subscriptions are charged, no credit cards are stored. If a paid feature is ever introduced in the future, a separate refund policy will be published at that time.

Service Level Agreement (SLA)

There is no SLA. This tool is provided free of charge with no uptime guarantees, no guaranteed response times, and no committed availability. I make reasonable efforts to keep it running but outages can happen. If the tool is down, try again later.

Cyber Liability and Transparency

Smart Analytics scans publicly available web pages. It does not access restricted areas, bypass authentication, or perform penetration testing. If you believe the tool has produced an incorrect result about your website, you can disregard it. No results from this tool should be treated as a definitive security assessment. For actual security audits, consult a qualified cybersecurity professional.

If you discover a security vulnerability in Smart Analytics itself, please report it to reports@smartanalytics.site. I will address it promptly.