Privacy Policy
Last updated: 17 August 2026
Sifryn (sifryn.com) is operated by Erwin Edink. This policy explains what personal data we process when you use Sifryn, including when you sign in with Google.
1. Who we are
Controller: Erwin Edink, operating Sifryn at https://sifryn.com. Contact: privacy@sifryn.com.
2. What we collect
- Account: your Google email address and a session cookie after sign-in.
- Access tokens: encrypted OAuth refresh/access tokens for services you connect (Google Analytics, Search Console, Business Profile, YouTube, Google Ads, and optionally Meta, TikTok, LinkedIn, Stripe keys, Shopify, WooCommerce webhooks).
- Settings: report preferences (sources, schedule, e-reader email, layout, report link token, optional device lock).
- Technical logs: basic server logs needed to run and secure the service (e.g. errors, timestamps).
We do not store a full copy of your Analytics, Ads or shop databases. We fetch data on demand to build your PDF report.
3. Google user data
When you connect Google, we request only the scopes needed to generate your report (typically read-only access to Analytics, Search Console, Business Profile, YouTube Analytics and/or Google Ads, plus your email). We use that data solely to:
- authenticate you;
- list properties/accounts you can select;
- build and deliver your personal e-reader PDF report.
We do not sell Google user data. We do not use Google user data for advertising. We do not share Google user data with third parties except as needed to operate the service (e.g. email delivery via our mail provider) or if required by law.
Our use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.
4. Legal bases (GDPR)
We process data to perform the service you request (contract), and where needed for security and legal obligations. Optional connections (Meta, TikTok, etc.) are based on your consent/actions in Settings.
5. Retention
We keep your account, encrypted tokens and settings while your account is active. You can disconnect providers in Settings (or revoke access in Google/Meta/etc.). To delete your account and associated data, email privacy@sifryn.com.
6. Security
Tokens are encrypted at rest (AES-256). Report links are secret; you may lock a link to one device. Transmission uses HTTPS.
7. Your rights
You may request access, correction, export or deletion of your personal data, and withdraw connected-app access at any time. Contact privacy@sifryn.com. You may also lodge a complaint with your local supervisory authority (in the Netherlands: Autoriteit Persoonsgegevens).
8. Changes
We may update this policy. The date above will change when we do. Continued use after an update means you accept the revised policy.