Privacy policy

Data of Zgadka users is processed by the Zgadka team (“we”). For questions about your data write to info@zgadka.com.

• Email address – for signing in, emails about checks and payments and the notifications you set up.
• If you left your email without an account to get a report or a summary of a check, it receives that email and at most one reminder about the same check. Every such email has an unsubscribe link.
• Addresses of the sites you check, the reports, questions and competitors for tracking, account settings.
• Payments: amounts, dates, status, transaction ID. We never receive bank card details – Creem processes them.
• Telegram – the chat ID, if you connected Telegram notifications.
• Where you came from (UTM tags of the first visit) – to see which ads work.
• Technical request data (IP address, browser) – in server logs to protect against abuse.

We set a session cookie (only for signing in, valid for 30 days), an interface language cookie and a short-lived mark after sign-up. Browser storage keeps the theme, your check history on this device and a random device ID.

For analytics the site uses Google Analytics (through Google Tag Manager) and Amplitude: they count page views and actions on the site and may set their own cookies.

The AI traffic script you put on your site doesn't use cookies or store visitors' IP addresses: we count only visits, pages and sources. Server logs you upload for bot analysis are processed in your browser and sent nowhere – only the counts reach us.

We don't sell data. We share it only with services the product can't work without, and only as much as needed:

• server hosting and email delivery – storing data and sending emails;
• AI model providers (Anthropic, OpenAI, Google) – the checked page's text for analysis and your questions for citation tracking; your email isn't shared with them;
• Google PageSpeed Insights, SerpAPI, Wikidata and Wikipedia – the checked site's address and name;
• payment providers (Creem for cards, a crypto payment provider for USDT) – the amount, invoice number and, for cards, your email;
• Telegram – messages, if you connected notifications;
• Google Analytics and Amplitude – data on visits and actions on the site.

Account data, reports and payment history are kept while the account exists. Payment records may be kept longer if the law requires it. Server logs – up to 90 days. Free checks without an account may be deleted after a while.

You can ask for a copy of your data, correct it or delete the account together with the data – write to info@zgadka.com from the account's address. We handle the request within 30 days. You can unsubscribe from tip emails in the notification settings.

If you believe we're violating your rights, you can complain to your country's data protection authority (in Ukraine – the Ukrainian Parliament Commissioner for Human Rights).

The site works over HTTPS only. Sign-in links are single-use and valid for 20 minutes; the database keeps only their hashes, as with sessions. Only you and those you gave a public link can see your reports.

We'll email you about significant changes to this policy. The date of the current version is at the top of the page.