Privacy and Cookies
Last updated: 23 August 2026
Sparkient Ltd is the controller for the personal data described here. We are a Scottish company (SC894831), registered at 48 West George Street, Glasgow, G2 1BP.
1. What we collect
- Account data: details such as your name, email address, sign-in provider, organisation, plan, and billing status.
- Product data: decision types, examples, model configuration, API usage, and decision logs that you choose to send to Sparkient.
- Operational data: request, device, security, error, and support records needed to run and protect the service.
- Campaign journey measurement: limited page and action counts for visits that arrive through a campaign-tagged link.
- Optional website measurement: the limited analytics and campaign data described below, only after the relevant choice.
2. Why we use it
We use data to provide and bill for the service, secure accounts, answer support requests, diagnose faults, improve Sparkient, measure our website, and understand advertising performance. Our legal bases are performance of a contract, compliance with legal obligations, our legitimate interests in operating and protecting the service, and consent for optional analytics and advertising technologies.
3. Website analytics and advertising
Optional technologies are off by default. Analytics and advertising are separate choices. We remember a choice for 180 days, then ask again.
| Technology | Purpose and data | Storage |
|---|---|---|
| Consent record | Stores only your analytics and advertising choices. | sparkient-consent-v1 in local storage, 180 days. |
| Sparkient acquisition record | After analytics or advertising consent, stores an anonymous ID and allowlisted campaign fields, including UTM values and a Reddit click ID, for first and latest touch. | sparkient-acquisition-v1 in local storage, 180 days. |
| Sparkient campaign journey measurement | For campaign-tagged visits, records the page, a small set of action labels, dwell time, allowlisted UTM values, and a random ID limited to the browser tab. The journey record excludes Reddit click IDs, raw IP addresses, referrers, user agents, prompt text, source code, and form values. Request metadata may still be handled as operational data. | The tab ID is held in session storage until the tab closes. Aggregate events are sent to Sparkient. |
| Sparkient first-party analytics | With analytics consent, records page views, audit-prompt interactions, playground actions, and signup starts with an anonymous ID and campaign context. | Sent to Sparkient. It does not include prompt text, source code, or decision inputs. |
| Google Analytics 4 | With analytics consent, measures pages and selected interactions. Google may process a pseudonymous client ID, device and browser data, referrer, and approximate location. | _ga and _ga_* cookies, configured to expire 180 days after they are first set. |
| Reddit Pixel | With advertising consent, measures page visits and audit-prompt interactions after an ad view or click. Reddit may receive the page, referrer, device, network, cookie, and campaign information. | Reddit-controlled cookies and pixel storage. We use the browser Pixel only, not Reddit's Conversions API. |
Change or withdraw your choice at any time through Cookie settings in the footer. Withdrawal stops future optional collection and removes the known Sparkient, Google, and Reddit browser storage we can access. It does not erase data a provider already received. See the Google Privacy Policy and Reddit Privacy Policy.
4. Who processes data
We use service providers for cloud hosting, authentication, payments, email, support, analytics, and advertising measurement. These currently include Google, Firebase, Stripe, SendGrid, and Reddit. We disclose only what is needed for each service or where law requires it. Some providers process data outside the UK using recognised transfer safeguards.
5. Retention and security
We keep personal data only while it is needed for the purposes above, including account operation, security, dispute handling, and legal obligations. Retention varies by record and product setting. We use access controls, encryption in transit, and operational safeguards, but no online service can promise absolute security.
6. Your rights
Depending on the law that applies, you may ask to access, correct, erase, restrict, or transfer your personal data, object to processing, or withdraw consent. You may also complain to the UK Information Commissioner's Office. We may need to verify your identity before acting on a request.
7. Contact
For privacy questions or requests, email Contact us.