Privacy Policy
Last updated: October 2026
What we collect
Your email address (for passwordless sign-in), your searches, saved leads and notes, and usage counts (how many searches and audits you have run). If you subscribe, Stripe processes your payment details; we never see your card number.
We also record how you first found Sifter: the referring site or campaign link that brought you here, held in a small cookie for up to 90 days and stored with your account when you sign up. We use it only to understand which channels bring us users.
To count visits, we record each page you view, the site or campaign link that sent you there, and your browser and device type. This sets no cookies and stores nothing on your device. Repeat visits on the same day are recognized through an anonymous code that PostHog’s servers compute from your IP address and browser; the IP address itself is then discarded. The code changes every day, so visits on different days are never linked.
For security, your IP address and browser type are stored with your sign-in session, and your IP address is kept briefly when you request a sign-in link, to stop abuse of the sign-in form.
If you share an audit report with a prospect, we record how many times that link was opened and when, so you can see it on the lead. Opening a report sets no cookies; the reader’s IP address is kept briefly only to limit abuse of the link.
How we use it
To operate the product: signing you in, running your searches and audits, enforcing plan limits, and billing. We do not sell your data or use it for advertising.
Third-party services
We rely on a small set of processors to run the service: Google (business search and page speed data), Anthropic (AI design review and pitch writing), Stripe (payments), Resend (sign-in emails), Cloudflare (the bot check on the sign-in page), PostHog (visit statistics, hosted in the EU), and our hosting provider. Each receives only what it needs to do its job.
Business data
The businesses shown in the product are public listings. Audit results describe publicly accessible websites and are cached and shared across users to avoid redundant scans.
Retention and deletion
We keep your data while your account is active. Email support [at] sifter.so to delete your account and its data; we will do so within 30 days, except for records we must keep for tax or accounting reasons.
Contact
Questions about this policy? Email support [at] sifter.so.