Privacy Policy

The short version

SpendRaven does not use cookies. We do not collect personally identifiable information (PII) from your visitors. Your data lives in an isolated database per domain and is never shared with third parties. That's the whole story.

What we collect

When visitors load a page on your site, our tracker records:

  • Page URL and referrer (no query strings containing personal data)
  • Country and approximate region (from IP, not stored)
  • Browser type and screen size (aggregated, not fingerprinted)
  • Session timing and engagement metrics
  • Conversion events you explicitly fire with spendraven.converted()

IP address processing

We collect and encrypt visitor IP addresses for the purpose of detecting and preventing click fraud on paid advertising campaigns. This processing is performed under the legitimate interest legal basis (GDPR Article 6(1)(f)).

  • IP addresses are encrypted at rest using AES-256.
  • Encrypted IPs are automatically deleted after 90 days.
  • Non-reversible IP hashes are retained separately for same-day repeat detection.
  • Detected fraudulent IPs may be shared with advertising platforms (Google Ads, Microsoft Ads) via their IP exclusion list APIs to prevent further fraudulent clicks.

No cookies, no consent banners

SpendRaven does not set cookies on your visitors' browsers. Sessions are identified using a privacy-preserving approach that does not rely on persistent identifiers. Because no cookies are set, you do not need to display a cookie consent banner for SpendRaven.

Data isolation

Every domain you track lives in its own isolated database. Your data is never mixed with data from other SpendRaven customers. We cannot access your analytics without authenticating as your account.

Data retention

Retention depends on your plan: 7 days on the Free tier, 12 months on Pro. Data older than your retention window is automatically deleted. You can request deletion of all your data at any time by emailing us.

Third-party sharing

We do not sell, rent, or share your data with third parties. We use a small number of infrastructure vendors (hosting, email delivery) who are contractually prohibited from accessing your data for any purpose other than delivering our service.

Your rights (GDPR)

If you are a visitor to a website that uses SpendRaven, you have the right to request access to, deletion of, or object to processing of your data. Contact [email protected] with the IP address and website domain in question. We will process your request within 30 days.

If you are a SpendRaven customer, you can request a full export or deletion of your account data at any time.

For website owners

If you use SpendRaven on your website, add the following to your privacy policy:

"We use SpendRaven (spendraven.com) to analyze paid advertising traffic and detect click fraud. SpendRaven collects and encrypts visitor IP addresses for this purpose under legitimate interest (GDPR Art. 6(1)(f)). IP data is automatically deleted after 90 days. See SpendRaven's privacy policy at spendraven.com/privacy for details."

Questions

If you have questions about this policy, email [email protected].