Privacy

To answer any question at all, we need to know what your product contains. We take a read-only copy of the repository you connect, read it once, and delete the copy. What stays behind is a map:

• Every screen, its address, its heading, and what it appears to be for
• Every button, link and field a person can press, and where in the code it sits
• The paths between screens, and the conditions that decide who may pass
• Findings worked out from those, and the counts they were worked out from

Your source code itself is never kept. We hold file names and line numbers so a finding can point at the right place. Where a route opens only under a condition, we also keep that short condition, written as your code writes it, because a paraphrased condition is not one you could check.

When you connect an analytics account, you give us a key that you created and scoped. We use it only to read, and only to ask two kinds of question: how many people reached each screen, and how many pressed each thing on it. We receive counts. We do not receive, request or store anything about an individual person who used your product.

The key is kept in an encrypted vault rather than in a table, is never sent to your browser once saved, and is deleted the moment you disconnect. You can disconnect from Settings at any time, and you can revoke the key from your analytics tool without asking us first.

Your email address, your name and picture if you signed in with Google, which workspace you belong to, and a record of significant actions taken in your account so that a question about what happened has an answer. If you subscribe, we hold which plan and when, and no card details of any kind at any point.

No analytics, no advertising pixels, no third-party scripts, and no cookie banner because there is nothing to ask you about. Signing in sets two: one holding your session and one used to renew it, both unreadable to any script on the page. There are no others, and neither follows you anywhere.

We are aware of how this reads on a product about analytics. We built it to read what you already collect precisely so that nobody has to collect more, and it would be odd to begin here.

Only the companies that run the parts of this, each doing one job:

• Supabase, which stores the database and handles signing in
• Google Cloud, which runs the service that reads code and answers requests
• Cloudflare, which serves this website
• GitHub, which is where the read-only copy of your code comes from
• Polar, which takes payment and is the merchant on your receipt
• Google, whose Gemini model phrases the suggestion on a finding

Nothing is sold, and nothing is shared for advertising. To name a button in your own words, the model is given the few lines around it. Never a whole file, never your repository, and never anything about a person who used your product. Everything else it sees is the finding and the numbers already worked out.

Reads of your code are pruned as newer ones replace them, and the most recent is always kept so the product has something to show. Everything else lasts as long as your account. Remove an app from Settings and every read of it goes with it. Ask us to close your account and all of it is deleted within thirty days, apart from records of payment, which the tax authorities require us to keep for longer.

A copy of everything we hold about you, which you can take yourself from Settings without asking. A correction, if something is wrong. A deletion, which we will do rather than argue about. Write to hello@userdrift.com and a person will answer, usually the same day.

If we ever have a breach that puts your data at risk, we will tell you what happened and what it means for you, in plain words, without waiting to have a fix in hand first.

If this changes in a way that affects what we hold or who sees it, we will email you before it takes effect. The date at the top moves when the substance moves, not when the website is rebuilt.

userdrift is operated by ZER0XCEPTION TECHNOLOGY LLP, in India. Write to hello@userdrift.com about anything on this page.