Privacy policy

Spyglo is owned and run by Ginger Onion, 20-26 Albert Road, Middlesbrough, TS1 1PR. Ginger Onion is the data controller for Spyglo (“Spyglo”, “we”, “us”). It explains what we collect when you check a website, create an account or subscribe to Spyglo Pro, and what we do with it. The short version: we collect as little as we can, we keep it in London, and we never sell it.

What we collect

• Checking a website without an account: we fetch the address you enter, read its public pages and show you the report. We don’t keep the report or link it to you. We set one small cookie (sweep_anon) that records that this browser has used its free check. It holds no personal details.
• Creating an account: we store your email address, your password (only as a scrambled hash we can’t reverse), whether you’ve verified your email, your plan, and the reports you choose to save, for up to 2 sites on the free plan or 10 on Pro.
• Asking us to email you a report: we store your email address, the address you checked, the time and your browser’s user-agent string, so we can send it.
• Subscribing to Pro: payment is handled entirely by PayPal. We never see or store your card or bank details. PayPal shares a subscription reference, its status and payment dates with us, so we can switch Pro on and send receipts. See PayPal’s privacy statement.
• Competitor tracking (Pro): the competitor addresses you add and their weekly check results.
• Client reports (Pro): your brand details and logo, and, if you set up monthly report emails, the email addresses and names of the people you send them to. Please only add people who expect them.
• Asking our team to fix something: if you ask for a quote from the dashboard, we store your name, email, phone number and business if you give them, the site, the issues you picked and your notes. With your consent, this goes to Ginger Onion’s technical SEO team so they can reply with a quote.

Cookies and analytics

We use two cookies the site needs to work: sweep_session keeps you signed in, and sweep_anon remembers your free check. On our public pages (not your dashboard) we also use Google Analytics, only if you accept it in the cookie banner, and Vercel Web Analytics, which uses no cookies and counts visits without identifying you. Our fonts are served from our own site. The full list is in our cookie policy, where you can change your choice at any time.

What we don’t do

• We don’t sell or rent your data to anyone.
• We don’t run advertising trackers, and Google Analytics never loads unless you say yes. Nothing tracks you inside your dashboard.
• We only ever read public web pages. Nothing is installed on the sites you check.

Emails we send

We send account emails (verifying your address, resetting your password), billing emails if you’re on Pro (receipts, renewal reminders, cancellations) and, on Pro, your weekly competitor report. They come from noreply@spyglo.com, sent through our UK email provider, and replies go to hello@spyglo.com.

Where your data is stored

Your account, saved reports and settings are stored in a private database run by Upstash in London (AWS eu-west-2). The site runs on Vercel, with the part that does the checks running in London. To be plain about it: Vercel and Upstash are US-based companies, so their staff or systems may access data from the US for support and security, under the UK-US data bridge. PayPal holds your payment details. If you accept analytics cookies, Google processes analytics data, which may be stored outside the UK under Google’s data transfer safeguards. All of them act as processors on our behalf.

How long we keep it

We keep your account and saved reports until you delete your account or ask us to. Emailed-report requests and fix requests are kept until you ask us to remove them. Google Analytics data is kept for 14 months. Billing records are kept for as long as the law requires.

Your rights

Under UK data protection law you can ask what we hold about you, ask us to correct it, ask us to delete it, or object to how we use it. Email hello@spyglo.com and we’ll usually sort it within a few days. If you’re unhappy with how we’ve handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk.

Changes

If this policy changes in a way that matters, we’ll update this page and the date at the top, and tell account holders by email.