Privacy policy

What we collect

Email address — required to send you the digest and to sign you in (Sproot doesn't use passwords; a link sent to your email is how you log in).

Profile info (name, role & company, short bio, LinkedIn, website) — all optional, only used to make your account more useful as new features ship.

Feedback you submit through the site — the message text and, if you're signed in or choose to add it, your email.

Pulse survey answers — your genre, monetization split, primary UA channel, and CPI/budget/ROAS/retention trend answers. These are submitted with no account and no email — they're tied only to a one-way hash of your IP address that changes every week, never to your identity, and are only ever published as part of the aggregate.

Pulse subscriber email (optional) — if you leave your email on the Pulse results screen, it's stored in a separate list from your survey answers, used only to send you the weekly results and, if it matches, a personal breakdown of your own answer against the market. See Pulse for how that matching works without an account.

Basic visit analytics — page visited, referring site, browser/device type, and campaign tags (utm_sourceand similar) if you arrived via a tagged link — logged against a one-way hash of your IP address that changes every day. We never store your actual IP, and there's no way to link this back to you or to what you did on a previous visit. This runs for every visit, doesn't use a cookie, and isn't affected by the Analytics choice below either way.

Google Analytics data — only if you opt in — if you click "Accept" on the cookie banner, page views, approximate location (city-level, derived from IP), device/browser type, and referring site are also sent to Google. Nothing here is sent unless you actively accept, and it stops the moment you change your mind — see "Cookie preferences" in the footer.

Where it lives

Your account, profile, feedback, Pulse answers, Pulse subscriber email (if given), and our own first-party visit analytics are stored in a database on our own server — not sold, not shared with advertisers, not used to train anything. A few specific third parties help run the site:

• Resend — sends the digest email and login links on our behalf.
• Google Sheets & Telegram — feedback you submit is logged to a private spreadsheet and forwarded to the founder, so it actually gets read.
• Google Analytics — only if you accept the cookie banner — Google LLC processes your visit data under their own Privacy Policy. We keep ad personalization signals off. If you never accept, none of your data ever reaches Google.

Cookies

One cookie by default, to keep you signed in — that's strictly necessary, so it's not something we ask permission for. Our own first-party visit analytics don't use a cookie or any other identifier stored on your device either.

Google Analytics is different: if you'd like us to use it, it sets its own cookies (_ga, _ga_*) to recognize repeat visits. That's why you'll see a banner on your first visit — until you click "Accept" there, no Analytics cookie is set and no request is sent to Google at all. Either choice is remembered on this device so we don't ask again, and you can change your mind anytime via "Cookie preferences" in the footer.

Legal basis & how long we keep it

Email, profile, feedback, and Pulse data (both the survey answers and, if given, the subscriber email): processed with your consent (submitting the form) and kept until you ask us to delete it — or, for a Pulse subscriber email, until you unsubscribe. Our own first-party visit analytics: processed under our legitimate interest in understanding, in aggregate, how the site is used — kept for 12 months on a rolling basis, then automatically deleted. Google Analytics data: processed only with your explicit consent (clicking "Accept"), kept per Google's own retention settings for the data they hold, and stopped immediately if you withdraw consent.

Your rights

Wherever you are, you can ask us to access, correct, delete, or export your data, or to stop processing it — message us (below) and we'll handle it directly; there's no support queue to get lost in. If you're in the EU/EEA or UK, this is your right under GDPR/UK GDPR specifically. To withdraw Google Analytics consent specifically, use "Cookie preferences" in the footer — no need to message us for that one.

Unsubscribing & deleting your data

Every digest and Pulse email has a one-click unsubscribe link — Pulse uses its own separate list, so unsubscribing from one doesn't affect the other. Unsubscribing from Pulse removes your email immediately; your past survey answers are untouched, since they were never linked to your email in the stored data itself — only via a hash we can no longer recompute without that email on file. To delete your account and data entirely, contact us (below) and we'll remove it.

Contact

Questions about this policy or your data — message Ilia directly on LinkedIn.