Privacy Policy

sourcebeam provides website analytics. This policy explains what data we collect, how we use it, and your rights regarding that data. We believe in transparency and simplicity — both in our product and in this policy.

sourcebeam is operated by Dawid. If you have questions about this policy, contact us at daveedsgn@gmail.com.

When a website owner installs the sourcebeam tracking script on their site, we collect the following data from their visitors:

Collected: Page URL and title, referrer URL, UTM parameters, browser type and version, operating system, device type, screen size, country and language (derived from headers), and custom events defined by the site owner.

Not collected: Names, email addresses, phone numbers, physical addresses, or any other personally identifiable information. We do not use cookies, localStorage, or any other client-side storage mechanism for tracking purposes.

IP addresses: We process IP addresses in memory to generate a hashed, non-reversible visitor identifier. The raw IP address is never stored in our database. The resulting hash cannot be reversed to recover the original IP. We use IP addresses to derive approximate country-level location — we do not store or expose city-level or more granular geolocation.

When you create a sourcebeam account, we collect: your name and email address (from your Google account via OAuth), and payment information (processed by Stripe — we do not store card numbers).

We use this data to: provide and maintain your account, process payments, send transactional emails (account notifications, billing receipts), and respond to support requests.

The sourcebeam tracking script does not use cookies. No first-party cookies, no third-party cookies, no cookie-like mechanisms. This means websites using sourcebeam do not need cookie consent banners for their analytics.

The sourcebeam dashboard (srcbeam.com) uses a session cookie to keep you logged in. This is a strictly necessary cookie for the service you requested (your account) and does not require consent under the ePrivacy Directive.

We do not sell, rent, or share your data or your visitors' data with third parties for advertising, profiling, or any other purpose unrelated to providing the sourcebeam service.

We use the following third-party services to operate sourcebeam:

Stripe — payment processing. Stripe receives your payment information directly. Their privacy policy governs their use of that data.

Turso — database hosting. Analytics data is stored in Turso-hosted databases.

Vercel— application hosting. Our application runs on Vercel's infrastructure.

Google OAuth — authentication. We use Google OAuth for account login. We receive your name and email — nothing else.

Analytics data is retained for as long as your account is active. If you delete your account, all associated analytics data is permanently deleted within 30 days.

Visitor identifiers (hashed, non-reversible) are rotated regularly. Raw IP addresses are never stored.

Under GDPR and similar regulations, you have the right to: access your personal data, correct inaccurate data, delete your data, export your data in a portable format, and object to processing of your data.

To exercise any of these rights, contact us at daveedsgn@gmail.com. We will respond within 30 days.

For account holders: we process your data based on contractual necessity (you need an account to use the service) and legitimate interest (billing, security, service improvement).

For website visitors tracked by sourcebeam: the site owner is the data controller and sourcebeam is the data processor. We process minimal, non-personal data (hashed identifiers, page URLs, device type) under the site owner's legitimate interest in understanding website usage. No consent is required because we do not use cookies or store personal data.