Privacy Policy

Information we collect

We keep data collection deliberately minimal:

• Account details — your name and email address, plus your profile photo if you sign in with Google. We use these to create your account and sign you in.
• Billing status — your plan (Free, Pro, or Lifetime) and a Stripe customer reference. We never see or store your card details — all payments are handled directly by Stripe.
• Your connected Stripe key — to display your revenue, you paste a restricted, read-only Stripe key, which we store encrypted. It can only read aggregate figures (MRR, total revenue, and recent sale amounts). It cannot move money, charge cards, or read your customers’ personal or card data.
• Visitor analytics — our tracking script is cookieless. For each pageview on a board you own, we store the board’s tracking ID, a timestamp, the page path, the referrer, and a daily-rotating, salted hash of the visitor’s IP address and browser. We never store raw IP addresses, set no cookies, and do no cross-site tracking — which is why no cookie banner is required.
• Website details — if you add your site’s URL, we fetch its public favicon, name, and description to show on your board.

How we use your data

• To run the service and render your dashboards and public boards.
• To authenticate you (via Google or email magic links).
• To process payments and manage your plan through Stripe.
• To send essential emails through Resend — sign-in links, a welcome email, the “new high” alerts you opt into, and billing notices.
• To keep the service secure and fix problems.

We do not use your data for advertising, and we do not build profiles of your visitors.

What’s shown publicly

Vauntly only publishes what you choose. Every board has a public/private toggle and separate switches for revenue and traffic. When a board is public, anyone with the link (or the embed) can see the metrics you’ve enabled — so only turn on what you’re comfortable sharing.

How we store and protect data

• Your data is stored in MongoDB, hosted on MongoDB Atlas.
• Your restricted Stripe key is encrypted at rest.
• All traffic is served over HTTPS.

Who we share data with

We do not sell, rent, or trade your personal data. We rely on a small set of trusted providers to run Vauntly:

• Stripe — payments and your revenue data.
• Resend — transactional email.
• Google — optional sign-in.
• MongoDB Atlas — database hosting.
• Vercel — application hosting.

Each one processes data only to provide its part of the service.

Keeping and deleting your data

We keep your data while your account is active. You can delete your account at any time from your settings — this permanently removes your boards, Stripe connections, snapshots, and tracking events. You can also email us to request a copy of your data or to have it deleted.

Cookies

Vauntly uses a single essential cookie to keep you signed in. The visitor analytics product itself is entirely cookieless.

Children’s privacy

Vauntly isn’t intended for anyone under 16, and we don’t knowingly collect data from children. If you believe a child has given us data, contact us and we’ll remove it.

Your rights

You can access, correct, export, or delete your personal data at any time. Email us and we’ll help.

Changes to this policy

We may update this policy from time to time. We’ll post any changes here and email you about anything significant.