Privacy Policy

This policy covers the Lurkly website and service. It applies whether you use Lurkly anonymously or signed in, on the free plan or Pro. By using Lurkly you agree to the handling of information described here.

What we hold depends on how you use Lurkly:

• What you submit. The URL you check, plus the brand and category details we read from the page or you confirm. We fetch the page at that URL and keep a cleaned-up text version of it — not the raw page.
• Check results.The buyer questions we generate, the AI engines’ answers and the sources those answers cite, and the summary we produce. These are stored so your result page — which doubles as its share link — keeps working.
• Account information (only if you sign in). From Google sign-in: your name, email address, and avatar. If you go Pro: your plan and a billing reference from our payment provider. We never see or store card numbers — payments are handled entirely by the payment provider.
• Limited technical data. Coarse request metadata used for rate limiting and reliability (e.g. a derived IP signal, error codes, and plan tier). We do not attach your submitted content to these logs.
• Privacy-friendly analytics. Aggregate usage and performance metrics via Vercel Analytics and Speed Insights, which are designed not to track individuals across sites.

• To run your check: fetch the page, ask the AI engines, and build the result you see.
• To keep your result page (which doubles as its share link) working.
• If you save a check as a product: to attach it to your account, re-run it (by hand on free, automatically each week on Pro), and email you when the answer changes — an alert you turned on, about your own data.
• To enforce fair-use rate limits and protect the service from abuse.
• To operate accounts and billing.
• To keep the service reliable and to understand aggregate usage.

We do not sell your personal information, we do not use your submitted content to show you ads, and we do not send marketing, digest, or re-engagement email.

• Check results and snapshots:stored and not auto-deleted, so result links keep working. Every check’s result lives at an unguessable link that search engines are told not to index — only people who have the link can open it, and passing it on is up to you. Snapshots older than 30 days carry a notice that AI’s answers have probably moved. An anonymous check isn’t linked to your identity.
• Account data: kept while your account is active and deleted when you close it (see Section 7), including your products and checks.
• Operational logs: short-lived and limited to non-content metadata.

To run Lurkly we share the minimum necessary data with a small set of service providers (“sub-processors”):

• AI engines (Perplexity, OpenAI, Google), reached through Vercel’s AI Gateway. The buyer questions and page context needed for your check are sent to these engines in web-search mode to produce the answers you see. They process requests under their own terms.
• Hosting & analytics (Vercel). Runs the website and provides aggregate analytics and performance metrics.
• Database (Neon Postgres). Stores check results, products, and account data.
• Cache (Upstash Redis). Holds rate-limit counters, runtime configuration, and some older share snapshots.
• Payments (Dodo Payments). Processes subscriptions as merchant of record and stores billing details under its own privacy policy.
• Email (Resend). Sends account and billing emails, and the change alerts you turn on.
• Sign-in (Google). Handles authentication when you choose to sign in.

These providers process data on our behalf under their own terms. Some are based in the United States, so using Lurkly may involve transferring information internationally.

Anonymous use doesn’t require signing in. When you do sign in, we use a small number of strictly necessary cookies to keep you signed in; these are set with HttpOnly, Secure, and SameSite=Lax attributes. We do not use third-party advertising cookies.

Anonymous checks aren’t tied to your identity, so we usually can’t attribute one to you after the fact. For everything else:

• Take down a shared link.If a share link points at something that shouldn’t be public, email us and we’ll take the snapshot down.
• Review the products and check history tied to your account at any time.
• Delete your account at any time. Deletion is a hard delete: we remove your account, sessions, products, and checks (including their share links) from our database, and cancel your subscription with our payments provider. Because that provider is the merchant of record for your purchase, it keeps the minimum transaction records it is legally required to retain for tax purposes. This completes promptly (typically within seconds), and we send one final confirmation email.
• Depending on where you live, you may have additional rights (such as access, correction, deletion, or objection) under laws like the GDPR or CCPA. To exercise any of these, email us at [email protected].

We take reasonable measures to protect your information: we keep submitted content out of our production logs, validate and restrict the URLs we fetch to prevent abuse, and gate accounts behind secure cookies. No method of transmission or storage is perfectly secure, but we work to keep the exposure surface small.

Lurkly is a tool for builders and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.

We may update this policy as the product evolves. When we do, we’ll revise the “Last updated” date above, and for material changes we’ll provide a more prominent notice. Continued use after an update means you accept the revised policy.

Questions about privacy? Email [email protected]. Lurkly is an independent product; you can reach the person behind it at that address. See also our Terms of Service.