Who we are
usrPeek is operated by Andrew Dowell, a sole trader based in the United Kingdom ("we", "us"). For anything in this policy, contact hello@usrpeek.com.
We process personal data in two distinct roles, and this policy covers both:
- As a controller for the data of people who create a usrPeek account.
- As a processor for the visitor data our customers collect on their own websites using our tracking script. If you visited a site that uses usrPeek, that site's owner is the controller of your data and their privacy policy applies alongside this one.
Data we collect about account holders
- Your email address, name and a hashed password when you register.
- Billing details if you subscribe to a paid plan. Card details are handled entirely by Stripe; we never see or store your card number.
- Emails we send you: a daily analytics summary, quota notices and account messages. You can unsubscribe from non-essential email at any time.
- If you connect Google Search Console, the OAuth tokens needed to fetch your search data. We store these encrypted and you can disconnect at any time, which deletes them.
The legal basis for this processing is the performance of our contract with you, and our legitimate interest in running and securing the service.
Data the tracking script collects about website visitors
usrPeek is built to be privacy-respecting by default. On our customers' websites, the script:
- Uses no cookies for tracking. Visitors are recognised within a site using a fingerprint derived from browser attributes. It cannot be used to identify a person by name and is not shared across different customers' sites.
- Records pages viewed, clicks on buttons and links, time on page, the referring site and campaign (UTM) parameters.
- Stores only a truncated form of the visitor's IP address (the first three octets, e.g. 203.0.113.x), used for approximate geolocation (country and city) and abuse prevention. The full IP address is not stored with analytics events.
- Records the browser's user-agent string to distinguish devices, browsers and known bots.
Site owners can switch on the built-in consent banner for their audience, and can delete an individual visitor's data on request (our GDPR deletion tool exists for exactly this).
Who we share data with
We do not sell personal data, run ads, or share data with data brokers. We use a small number of service providers to run usrPeek:
- Stripe — payment processing for paid plans.
- Email delivery providers (currently Resend) — to send the emails described above.
- MaxMind — we use their GeoIP database locally to turn truncated IP addresses into approximate locations; visitor data is not sent to MaxMind.
- Hosting infrastructure — our servers and database, where all data above is stored.
- AI providers (OpenAI, Perplexity, Google) — only for the AI Monitor feature, which sends the prompts a customer configures (e.g. "best analytics tools") to these services. No visitor data or account data is included in those prompts.
Where a provider processes data outside the UK, we rely on UK adequacy decisions or standard contractual clauses.
How long we keep data
Account data is kept while your account is active and deleted when you delete your account. Visitor analytics data is kept while the associated site exists in usrPeek; deleting a site deletes its analytics data. Individual visitors can be deleted at any time by the site owner.
Your rights
Under the UK GDPR you have the right to access, correct, delete, restrict and object to the processing of your personal data, and to data portability. Email hello@usrpeek.com and we will respond within one month.
If you visited a website that uses usrPeek and want your data deleted, contact that website's owner; we provide them the tools to do it. If you cannot reach them, contact us and we will help.
You also have the right to complain to the UK's supervisory authority, the Information Commissioner's Office (ICO).
Changes to this policy
If we make material changes we will update this page and note the new date at the top. For significant changes affecting account holders, we will email you.