Privacy Policy

This policy covers the Lurkly website and service. It applies whether you use Lurkly anonymously (Free) or as a signed-in Pro subscriber. By using Lurkly you agree to the handling of information described here.

What we hold depends on how you use Lurkly:

• Content you submit.The URL or pasted text you ask us to review, plus the optional “target audience” note and output-language choice. We fetch the page at the URL you give us and read its text.
• Generated output. The persona critiques and summary we produce from your submission.
• Account information (Pro only). Your email address, plan, and a billing reference from our payment provider. We never see or store full card numbers — payments are handled entirely by our third-party payment provider.
• Limited technical data. Coarse request metadata used for rate limiting and reliability (e.g. a derived IP signal, error codes, content type, and tier). We do not attach your submitted content to these logs.
• Privacy-friendly analytics. Aggregate usage and performance metrics via Vercel Analytics and Speed Insights, which are designed not to track individuals across sites.

• To fetch the page you submit and generate the five-persona critique and summary.
• To create a temporary shareable result link, if you choose to share one.
• To enforce fair-use rate limits and protect the service from abuse.
• To operate Pro accounts: authentication, billing, and review history.
• To keep the service reliable and to understand aggregate usage.

We do not sell your personal information, and we do not use your submitted content to show you ads.

• Free tier — submissions & output: processed in memory and dropped after the response. If you generate a share link, a snapshot is cached for up to 7 days and then expires automatically.
• Pro — review history: stored for up to 90 days so you can revisit and compare versions. Pro share-link snapshots expire after up to 30 days.
• Account data (Pro): kept while your account is active and deleted when you close it (see Section 7).
• Operational logs: short-lived and limited to non-content metadata.

To run Lurkly we share the minimum necessary data with a small set of service providers (“sub-processors”):

• AI model providers (Anthropic, OpenAI).Your submitted content is sent to these providers to generate the critique. We request that submissions are not used to train their models, using the providers’ available data-control settings.
• Hosting & analytics (Vercel). Runs the website and provides aggregate analytics and performance metrics.
• Temporary cache (Upstash Redis). Holds short-lived share-link snapshots subject to the expirations above.
• Database (Pro only). Stores Pro account and review-history data.
• Payments. Subscriptions are processed by a third-party payment provider, which stores billing details under its own privacy policy.
• Email (Resend). Sends account and billing emails to Pro users.

These providers process data on our behalf under their own terms. Some are based in the United States, so using Lurkly may involve transferring information internationally.

Free, anonymous use does not require you to sign in. For Pro, we use a small number of strictly necessary cookies to keep you signed in; these are set with HttpOnly, Secure, and SameSite=Lax attributes. We do not use third-party advertising cookies.

Because Free use is anonymous, there is usually nothing tied to your identity to access or delete. For Pro accounts, you can:

• Access and export the review history associated with your account.
• Delete your account at any time. Deletion is a hard delete: we remove your account, subscriptions, review history and stored payloads from our database, purge any related cache snapshots, and cancel your subscription with our payments provider. Because that provider is the merchant of record for your purchase, it keeps the minimum transaction records it is legally required to retain for tax purposes. This completes promptly (typically within seconds), and we send one final confirmation email.
• Depending on where you live, you may have additional rights (such as access, correction, deletion, or objection) under laws like the GDPR or CCPA. To exercise any of these, email us at [email protected].

We take reasonable measures to protect your information: we keep submitted content out of our production logs, validate and restrict the URLs we fetch to prevent abuse, store any account credentials and API secrets only as hashes, and gate access behind secure cookies. No method of transmission or storage is perfectly secure, but we work to keep the exposure surface small.

Lurkly is a tool for builders and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.

We may update this policy as the product evolves. When we do, we’ll revise the “Last updated” date above, and for material changes we’ll provide a more prominent notice. Continued use after an update means you accept the revised policy.

Questions about privacy? Email [email protected]. Lurkly is an independent product; you can reach the person behind it at that address. See also our Terms of Service.