Privacy Policy
Last updated: July 19, 2026
This policy explains how RefreshRadar (“we”, “us”) handles your personal data when you join our early-access list or use the RefreshRadar service at refreshradar.app. RefreshRadar is run by an independent individual based in Poland (not yet a registered company). For the purposes of the EU General Data Protection Regulation (GDPR), that person is the controller of your personal data and can be reached at support@refreshradar.app.
The Service connects to your Google Search Console with read-only access and sends you a weekly, prioritized list of the pages losing traffic. We never post, change, or delete anything in your Search Console or on your site.
What we collect
- Account information — when you sign in with Google, we receive your name, email address, and profile picture.
- Search Console data — with your permission, we read your Search Analytics: aggregated per-page performance metrics (clicks, impressions, click-through rate, average position) over time, the list of your verified properties, and the page URLs on your own site. We store this to produce and show your decay analysis and its history.
- Google access tokens — the token that lets us fetch the above. It is stored encrypted and used only for that purpose. You can revoke it at any time.
- Billing information — subscription status and limited billing metadata from our payments provider. We do not receive or store your full card details.
- Waitlist and campaign data — if you join the early-access list: your email, any role you select, and the marketing campaign parameters (UTM tags), referring page, and pricing tier you clicked, taken from the page address when you submit the form.
We do not intentionally collect special-category data, and you should not send us any.
Google Search Console data — Limited Use
RefreshRadar’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we use your Search Console data only to provide and improve the user-facing features of RefreshRadar (detecting decay and building your weekly priorities). We do not use it for advertising, we do not sell it, we do not transfer it to others except as needed to provide the Service or as required by law, and we do not allow humans to read it except with your consent, for security, to comply with law, or where the data is aggregated and anonymized.
Why we use it, and our legal basis
- To provide the Service — connect your Search Console, analyze decay, and send your weekly digest — on the basis of our contract with you (GDPR Art. 6(1)(b)).
- To contact you about early access and send the confirmation (double opt-in) email — on the basis of your consent (Art. 6(1)(a)), which you can withdraw at any time.
- To measure what resonates and improve the site (campaign, referral and tier data; optional analytics) — on the basis of our legitimate interests (Art. 6(1)(f)), and, for analytics cookies, your consent.
We do not carry out automated decision-making that produces legal or similarly significant effects on you.
Cookies
We use strictly necessary cookies to keep you signed in and secure your session — these are required for the Service to work and need no consent. We use no advertising cookies.
If we enable privacy-friendly analytics, the analytics script and its cookies load only after you opt in via our cookie banner; declining keeps them off. We store your choice in a small first-party cookie so we don’t ask again. You can change your mind by clearing that cookie.
Who we share it with
We share your information only with the service providers that help us operate, and only for that purpose (our processors / sub-processors):
- Google (Google Ireland/LLC) — the source of your sign-in identity and, with your permission, your Search Console data. Google privacy policy.
- Supabase — hosts our database (in an EU region), where your account and Search Console analysis are stored. Supabase privacy policy.
- Netlify (Netlify Inc.) — hosts and serves the application. Netlify privacy policy.
- Brevo (Sendinblue SAS, France) — stores your email and sends our emails, including the weekly digest. Brevo privacy policy.
- Lemon Squeezy — our payments provider and merchant of record; processes your subscription and payment. Lemon Squeezy privacy policy.
We do not sell your personal data.
International transfers
We store the core database in the EU (Supabase), and Brevo processes data within the EU. Some providers — Netlify, Lemon Squeezy, and Google — may process data in the United States. Where personal data leaves the EEA, the transfer relies on the EU–U.S. Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses, with additional safeguards. Email support@refreshradar.app for detail.
How long we keep it
We keep your Search Console metrics on a rolling window of about 13 months so we can show trends and recovery. We keep your account and subscription data for as long as your account is active. When you disconnect Google, delete your account, or ask us to erase your data, we delete your Search Console data and access tokens, and we action deletion requests within 30 days (retaining only what the law requires, e.g. records of a payment). Waitlist data is kept until you unsubscribe or ask us to delete it.
Your rights (EEA/UK)
Under the GDPR you have the right to access, rectify, erase, restrict, and port your personal data, to object to processing based on our legitimate interests, and to withdraw consent at any time (without affecting processing carried out before withdrawal). You can unsubscribe from every email using the link it contains, and disconnect Google access from your account. To exercise any right, email support@refreshradar.app.
You also have the right to lodge a complaint with a supervisory authority. In Poland this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warszawa — uodo.gov.pl.
California privacy rights
If you are a California resident, you may have the right to know, access, correct, and delete the personal information we hold. In the past 12 months we have collected identifiers (such as your email), your Google account profile, your Search Console performance data, and campaign or referral data associated with your signup.
We do not sell or share your personal information for advertising, and we will not discriminate against you for exercising your rights. To make a request, email support@refreshradar.app.
Children
This Service is not directed to children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us data, contact support@refreshradar.app and we will delete it.
Changes to this policy
If we change this policy we will update the date at the top of this page. Material changes that affect how we use your data will be communicated by email where appropriate.
Contact
Questions or requests about your privacy? Email support@refreshradar.app.