Privacy policy

SimpleDash (simpledash.app) is run by Koochak Art, Lauriergracht 116 D2, 1016 RP Amsterdam, the Netherlands. We are the controller of your account data. For anything about your data, email [email protected].

• Your account: your name, email address and profile picture from Google.
• Your sign-in sessions: when each one expires and which browser it belongs to. No IP addresses.
• Your settings: the sites you added, each site's signup event, public page choices, Search Console property and name spellings, and the weekly email switch.
• Your Google access tokens, encrypted, so we can read your reports when you aren't signed in (for the weekly email).
• Chart notes you write.
• Short-lived report caches: aggregated numbers such as total visitors, top pages and top countries, and, if you connect Search Console, totals and the top searches and pages from it. They are deleted after 7 days without use.
• Your billing status (plan and renewal date). Card details stay with Stripe.
• If you connect your own Stripe account (Pro): the restricted read-only key you paste, encrypted, and daily totals per site: money charged, refunds, the number of new customers and monthly recurring revenue. Never your customers' names, emails, card details or IDs. Removing Stripe in Settings deletes the key and the totals.

We never store visitor-level data: no IP addresses, no visitor IDs, no individual visits. SimpleDash has no tracking script of its own.

SimpleDash is open source, so you can check this list against the code: every table the app stores is in one file.

• Basic profile (name, email, picture), to sign you in.
• Google Analytics, read-only (the analytics.readonly scope), to list your properties and fetch the reports shown on your dashboard, in the weekly email and, if you turn it on, on your public page. We can't change anything in your Google account.
• Search Console, read-only (the webmasters.readonly scope), only if you connect it on Pro: to list your Search Console properties and fetch the search reports shown in the Google search card. It is asked for only when you connect it, and we can't change anything in Search Console.

SimpleDash's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we use Google data only to provide the features you see; we don't sell it, use it for ads or to train AI models, and no person reads it unless you ask us to for support, it's needed for security, or the law requires it.

If you accept cookies in the banner, SimpleDash uses Google Analytics 4 on all of simpledash.app (the website, the dashboard and public stats pages) to count visits. If you decline, Google Analytics isn't loaded at all, and nothing is sent to Google.

• What it records: the pages you open, where you came from, your browser and device type, and your approximate location (city or country). Google uses your IP address to work out the location and doesn't store it. It also notes four moments: signing up, signing in, starting a checkout and buying Pro, with the plan and price but never your name, email or account.
• Cookies: _ga and _ga_…, which tell your visits apart, kept for up to 13 months.
• What we do with it: we look at the totals to see what people use and improve SimpleDash. No ads, no Google signals or ad personalisation, nothing sold, and nothing linked to your account.
• Google processes this for us and may do so in the United States, under the EU–US Data Privacy Framework.
• Your choice is kept in your browser. Change it any time: Cookie settings.

On Pro you can paste a restricted Stripe key with read access, to see revenue next to your visitors. SimpleDash uses it only to read charges, refunds, customers' creation dates and subscription prices, adds them up per day, and keeps only those totals. It can't change anything in your Stripe account, and we refuse keys that could.

A public page is off until you turn it on. When it's on, anyone with the link can see the cards you chose. It never shows your notes, email address, name or property ID. You can turn it off at any time. Its visitors get the same analytics choice as everyone on simpledash.app (above): if they allow it, their visit is counted in SimpleDash's own Google Analytics, not in yours.

• Microsoft Azure: the server that runs SimpleDash and its database.
• Cloudflare: DNS, network protection, caching, email forwarding, and storage for the nightly database backups.
• Resend: sends the weekly email.
• Stripe: payments. Stripe is the merchant of record, so it sells the subscription to you and handles tax under its own privacy policy.
• Sentry: error reports from our server. They don't include your Google data.
• Google: Google Analytics, only if you allow it (above).

• To provide SimpleDash (your account, the dashboard, the Monday email, public pages you turn on, and billing): it's needed for our agreement with you.
• Connections you choose (Google Analytics, Search Console, Stripe) and Google Analytics on simpledash.app: your consent, which you can take back at any time by disconnecting or in cookie settings.
• Keeping SimpleDash safe and working (error reports, backups, stopping abuse): our legitimate interest in a secure, reliable service.
• Tax and accounting records, kept by Stripe as merchant of record: legal obligations.

Everything travels over HTTPS. Google tokens and Stripe keys are stored encrypted, Google access is read-only, and backups are kept private. No system is perfectly secure, but if a breach ever affects your data, we'll tell you and the authorities as the law requires.

• Delete account (in Settings) removes your account and everything in it right away, cancels any subscription and revokes our Google access.
• Disconnect Google revokes our access and deletes the stored tokens and cached reports. Your settings and notes stay, so signing in again restores them.
• Report caches are deleted after 7 days without use.
• Database backups are kept for 30 days, then deleted.
• You can also remove our access from your Google account at any time (myaccount.google.com → Security → Third-party apps).

Two kinds, and no advertising cookies at all. The cookies needed to keep you signed in and to finish the Google sign-in safely are always used. Google Analytics' cookies are set only if you allow them (above); Cookie settings lets you change that.

You can ask to see, correct, export or delete your data, or object to how we use it. Email [email protected]. If you're in the EU or UK, you can also complain to your data protection authority; in the Netherlands, that's the Autoriteit Persoonsgegevens.

SimpleDash is for businesses and adults. It isn't meant for anyone under 16, and we don't knowingly collect their data.

The live globe places visitors using city data from GeoNames, licensed under CC BY 4.0. Its map comes from Natural Earth (public domain) and is served by SimpleDash itself, and its faces are DiceBear's Notionists by Zoish (CC0). Country flags come from country-flag-icons (MIT).

If we change this policy, we update the date at the top. For important changes, we email you first.