Privacy and cookies

Google data

On a paid plan you can connect your Google account, so Ferrik can show Search Console and Google Analytics figures in your projects. Connecting is optional, and Ferrik works without it.

What Ferrik can access

When you connect, Google asks you to approve read-only access. Ferrik asks for nothing it can change.

Ferrik doesn't read data about individual visitors to your site, though page addresses are stored as Google reports them, including any query string.

How Ferrik uses it

Only to show it to you: in your projects, in your reports and exports, and to measure what changed after you fixed something. We don't use it for advertising, we don't use it to train AI or machine-learning models, and no person at Ferrik can read it.

Where it's stored

On your computer, in the same local database as your crawl data. The app talks to Google directly, so this data never passes through or reaches our servers. The sign-in token that keeps you connected is encrypted by Windows on your computer.

Who we share it with

Nobody. It leaves your computer only when you export a report or make a backup, to the folder you choose.

Disconnecting and deleting

• Disconnect in Ferrik's settings at any time. Disconnecting deletes the access Google gave Ferrik from your computer and asks Google to cancel it. If that request doesn't reach Google, you can remove Ferrik's access in your Google Account's third-party connections, at myaccount.google.com/permissions.
• Figures Ferrik has already fetched stay in your projects after you disconnect, so your reports still make sense. To remove them, choose "Delete Google data" in Ferrik's settings. It removes the Search Console and Analytics figures from every project and leaves your crawl data alone. Backups you've already made keep their own copy until you delete them.

Google's Limited Use rules

Ferrik's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

PageSpeed and Chrome UX Report

These use an API key that you create in your own Google account and paste into Ferrik. Ferrik sends Google the key and the addresses of the pages being measured. The key is encrypted on your computer and never sent to us.

Your account, your team's seats and licence checks

You need an account only if you pay for Ferrik or someone gives you a seat. This is what we hold.

If you give someone a seat

You type their email address, and we use it only to let them activate Ferrik and to tell them about their seat. Please make sure they're expecting it. As the account owner you can see, for each of their computers, its name, whether it's Windows or macOS, when it was activated and when it last checked in. You can't see their crawl data, and neither can we.

Licence checks

On a paid plan the app contacts our licence service when you activate it and then from time to time, so it knows your plan is still active. To activate a computer, Ferrik sends your email address, a scrambled code made from your computer's ID (never the ID itself) and, if you type one, the computer's name. Each check sends the reference of your registered computer and a signed proof that it's the same computer. It doesn't send your crawl data, the sites you work on, or anything about what you do in Ferrik. If the service can't be reached, your plan keeps working for 3 days.

If you lose everything

If you lose your passkeys, your recovery codes and your email, we can recover your account by hand. We'll ask for proof that it's yours, such as the last four digits of the card you pay with and the date of a recent payment, and for a company we check its public record at Companies House. We keep a short note of what we checked, not copies of documents.

Paying, and the emails we send

Paying

When you buy Ferrik, Sold Through Link, LLC, Stripe's merchant of record, sells it to you and collects the payment ("Sold through Onelink" in the UK, "Sold through Link" elsewhere). It takes the payment, works out the tax, and sends your receipts and invoices. Your card statement shows ONELINK* FERRIK or LINK.COM* FERRIK. Sixteen K Limited stays responsible for the personal data we handle ourselves, as this policy describes.

• Link (Onelink in the UK) holds your payment details: your card, billing name and address, and invoices. It does so under its own terms and privacy policy, as a separate controller.
• We never see your card number. In our Stripe account we can see the last four digits, your billing name and address, and your payment history, so we can answer billing questions and check who you are if you ask us to recover your account.
• In our own records we keep your plan, the number of seats, the currency, the country you bought from, the amounts charged, and whether each payment succeeded, failed, was refunded or was disputed. We also keep a scrambled reference to Stripe's record of each payment, and to who confirmed each plan change.
• Your subscription's reference: in full for 12 months after your account closes, then only in scrambled form for the rest of the 6 years.
• You can manage your subscription with Onelink directly: change your card, cancel, or ask for a refund. If you ask Onelink to delete your data, it cancels your subscription and removes your records from its systems. Your paid plan runs to the end of the period you've paid for, and we'll ask whether you'd like us to delete the records we hold too.

Emails

We send email through Resend. We send:

• sign-in and recovery codes;
• messages about your account and seats, such as a seat being given or removed;
• the launch announcement, if you joined the launch list (section 6).

We don't send marketing email unless you've asked for it. Resend receives the recipient's address and the content of each message, and keeps its delivery records for 30 days. Records of the emails we send you, such as when each was sent and whether it arrived, are kept for 12 months. If an address bounces or you mark a message as spam, we stop sending to it and keep a scrambled form of the address so we don't try again.