Privacy Policy

1. Information we collect

Your account

You can create an account with an email address and password, or with Google sign-in. Accounts are run by our authentication provider, Supabase, which stores your email address, your password in hashed form (if you set one), and when you signed up and last signed in.

Google sign-in

If you choose “Continue with Google”, Google shares your basic profile with us: your name, email address, profile picture and Google account ID. Supabase stores them with your account. We use your email address and Google account ID to sign you in and identify your account and, if you subscribe, your name and email address for billing (see Payments). We don't use your profile picture. Sign-in asks only for this basic profile, never for access to your Gmail, contacts, files or any other Google data.

Payments

Subscriptions are processed by Stripe. When you start a checkout, we create a Stripe customer record with your email address, your name (if your account has one) and your TrendBreakouts account ID. You enter your card details on Stripe's own checkout page, so we never see or store your card number. We keep your email address, name, Stripe customer ID and current subscription ID in our database to show your plan and to open Stripe's billing portal for you. Stripe handles payment data under the Stripe Privacy Policy.

Analytics

We use Google Analytics, loaded through the Google tag, to see which pages are visited and how people find the site. It records the pages you view, the page that referred you, your browser and device type, and an approximate location that Google derives from your IP address. It sets cookies such as _ga. Google describes its use of this data in How Google uses information from sites or apps that use our services, and you can opt out with the Google Analytics opt-out browser add-on.

We also use Vercel Web Analytics, which counts page views, referrers, and browser, device and country information without using cookies.

Cookies

Supabase sets sign-in cookies when you sign in (and while Google sign-in completes) so you stay signed in. Google Analytics and the Google tag set analytics cookies. Stripe's checkout and billing pages are run by Stripe and set Stripe's own cookies. You can block or delete cookies in your browser settings, but you need the sign-in cookies to stay signed in.

Server logs and website icons

As with any website, our host, Vercel, receives your IP address, browser user agent, the page requested and the time of each request, and keeps request logs for a limited period to run and secure the site. This includes requests for TrendBreakouts badges that other websites embed. Ranking and profile pages show website icons loaded from Google's favicon service, so your browser requests those icons from Google.

2. How we use information

• To create your account, sign you in and keep your account secure.
• To process your subscription, show your plan and let you manage billing in Stripe's billing portal.
• To send account emails through Supabase: address confirmation and password resets.
• To reply when you contact us.
• To see which pages are used, and to keep the site working and secure.

We don't sell your personal information.

3. Who we share it with

We share information only with the service providers that run the site, and only for the purposes above:

• Supabase: accounts, sign-in and our database.
• Stripe: payments and billing.
• Vercel: hosting, server logs and Web Analytics.
• Google: Google Analytics and the Google tag, Google sign-in, and website icons.

We may also disclose information when the law requires it.

4. Google user data

This section explains how TrendBreakouts accesses, uses, stores and shares Google user data.

Google sign-in

Google sign-in gives us only your basic profile (name, email address, profile picture and Google account ID). We use it to sign you in, and pass your name and email address to Stripe as your billing details only if you subscribe. It is kept with your account until your account is deleted.

Google Ads API (Keyword Planner)

• Scope and purpose. TrendBreakouts' Google OAuth app requests one scope, the Google Ads API scope (https://www.googleapis.com/auth/adwords). We use it only to call Keyword Planner (KeywordPlanIdeaService historical metrics) on TrendBreakouts' own Google Ads account, to get monthly search-volume figures for the keyword and website trend rankings. Only TrendBreakouts' own Google account authorizes this app. Visitors and customers are never asked to connect a Google Ads account.
• Limits. The app reads keyword search-volume metrics only. It never reads or changes campaigns, ads, billing or anyone else's data.
• Use and sharing. The data is used only to compute the rankings shown on TrendBreakouts. It is never used for advertising or profiling, never sold, and not shared beyond the service providers that run the site.
• Storage. The OAuth token is stored only on the private computer that runs TrendBreakouts' data pipeline. It is never published and is not stored in the website's database. Keyword metrics are stored in TrendBreakouts' own database.
• Retention and deletion. Keyword metrics are aggregate figures about search terms, not personal data, and are kept while they are used in the rankings. The OAuth token is kept only while TrendBreakouts uses Keyword Planner; when that use ends, we revoke and delete it.
• Revoking access. Access can be revoked at any time at https://myaccount.google.com/permissions. If you signed in to TrendBreakouts with Google, you can remove TrendBreakouts there too, and email support@trendbreakouts.com to have your account and the Google profile data stored with it deleted.

TrendBreakouts' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. Keeping and deleting your data

We keep your account data while your account exists. Email support@trendbreakouts.com from your account's email address to get a copy of your data, correct it or delete your account. You can cancel your subscription at any time under Billing in the account menu, which opens Stripe's billing portal. Stripe keeps payment records for as long as the law requires.

6. Security

The site is served only over HTTPS. Supabase stores passwords hashed, and only Stripe handles card details.

7. Changes to this policy

When our practices change, we update this page and the date at the top.

8. Contact us

Questions or requests about this policy or your data: support@trendbreakouts.com.