Privacy policy

Last updated: 22 July 2026

Who we are

The company behind Page Analytics, and the controller of your personal data, is:

OPTIMISTICLINES - UNIPESSOAL LDA
Rua Virgílio Ferreira, N.º 82, 2.º Esq.
4430-686 Vila Nova de Gaia
Portugal

Company registration number (NIPC): 516870386

For any question about this policy or your personal data, including to exercise any of the rights described below, write to us at support@optimisticlines.com.

What we collect

What you give us. When you create an account, contact us, or buy a subscription, we collect your name and email address. Your card details go straight to Lemon Squeezy, our payment provider, and never reach us. If you add billing details, we store the name, street address, city, postal code, country, optional state or region, and optional invoice note that you enter. We use these details to generate your invoices without asking you to enter them again. We do not collect VAT or tax numbers directly or store them in our database. Lemon Squeezy may include a tax number collected at checkout in the invoice PDF; that PDF passes through Page Analytics and, for email delivery, Brevo, but we do not retain it.

What we get from your Google account, with your permission. When you authorize Page Analytics, we collect:

  • Your Google profile: name, email address, and avatar.
  • Metrics about your websites: visitor numbers, traffic sources, and related figures from Google Analytics 4 and Search Console, for the sites you have given us permission to analyze.
  • Domain names and property metadata: the domains, Analytics properties, and Search Console sites you have access to, so we know where to show Page Analytics features.

Page Analytics cannot work without access to your Google account, so if you do not grant it, we cannot offer you an account.

How you use the service. While you are signed in, we record the actions you take, such as opening a report or using a feature, along with your IP address and technical details of the request. We store these records in our own database and use them to understand how the service is used and to improve it.

What we collect when you visit the website. Signed in or not, we set two strictly necessary cookies: a session identifier and a security token. If you consent to analytics cookies, Google Analytics then collects standard technical data about your visit, such as your IP address, browser type, and the pages you view, and if you are signed in it also receives your account identifier, so that we can recognize repeat visits from the same person. If you decline, we collect none of that. See "Cookies" below.

Page Analytics' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Why we use your data

The GDPR requires us to have a lawful basis for everything we do with your data. Here is ours.

What we do What allows us to do it
Run your account and give you the analytics you asked for Our contract with you
Read your Google Analytics and Search Console data Your consent
Answer your questions through the AI assistant Our contract with you
Pass your payment and billing details to Lemon Squeezy so they can bill you and render your invoices, and keep a record of your plan Our contract with you
Send you the service emails you cannot opt out of while you hold an account Our contract with you
Send you promotional emails and product updates Your consent, which you can withdraw at any time
Set analytics cookies on our website Your consent, which you can withdraw at any time
Monitor errors, prevent abuse, and improve the service Our legitimate interest in a secure, working product
Meet the tax and accounting rules that apply to us A legal obligation

You consent to us reading your Google data when you authorize Page Analytics, and you can withdraw that consent at any time by revoking access in your Google Account permissions. Withdrawing it does not make what we did beforehand unlawful.

We do not make automated decisions about you that produce legal effects or similarly significant effects, and we do not profile you.

Who else sees it

We do not sell your personal data. We share it with these companies, and they may only use it to provide their service to us.

Recipient What they do for us Where
Google (Google LLC, Google Ireland Ltd) Sign-in, the Analytics and Search Console APIs, Gemini for the AI assistant, for spotting bot traffic in your reports, and for working out how to address you in emails, analytics on our own website EU and USA
Lemon Squeezy (Sold through Link, LLC) Payments, subscription billing, and invoice rendering USA
Sentry (Functional Software, Inc.) Error and performance monitoring USA
Brevo (Sendinblue SAS) Transactional and marketing email, including invoice delivery EU (France)
Pushover (Pushover, LLC) Operational alerts to our team USA

Pushover. The alerts it delivers to our team are a status line, such as "New support request", plus a link that only works for someone logged in to our systems. They carry no personal data.

Payments. Lemon Squeezy, operated by Sold through Link, LLC, is the merchant of record for your subscription. They take the payment and keep the record of it to meet their own tax obligations. When an invoice is generated for download or email, we send them your current billing address and optional invoice note so they can render it. If you have invoice emails enabled, we pass the resulting invoice to Brevo for delivery to your Page Analytics account email. Lemon Squeezy's privacy policy governs what they do with your data.

The AI assistant. When you ask the assistant a question, your question and the analytics data it needs to answer go to Google's Gemini API. That content is not used to train third-party models.

Google user data. We share it with no one, except where we need to run the service for you, or where the law requires it.

We will also give your information to law enforcement or a government agency where the law requires us to.

Data that leaves the EU. Everyone above except Brevo is outside the European Economic Area. Google and Sentry are certified under the EU-U.S. Data Privacy Framework, which you can check on the official list or on their own pages, for Google and for Sentry. Our transfers to Lemon Squeezy rely on the European Commission's Standard Contractual Clauses, which are part of their data processing agreement with us. Pushover needs no safeguard, because it receives no personal data from us.

How long we keep it

Data How long
Your account: name, email, Google profile and tokens, your websites and properties, your subscription, your billing details, your support requests, the emails we sent you, and our internal log of alerts about your account Until you delete your account
Records of how you use the service, including your IP address Until you delete your account
Questions you ask the AI assistant and the reports it writes Until you delete the report, or your account
Cached copies of your Google Analytics and Search Console data, and cached Google access tokens Up to a day
Login sessions 90 days
Google API quota records 90 days
Invoices and payment records Held by Lemon Squeezy under their rules. We do not retain copies
Feedback you leave when closing your account Kept with no link to you
Your email address, if you asked us to stop product, promotional, or other non-billing emails Until you ask us to remove it
Daily record of which features an account used Kept indefinitely. Anonymous once the account is deleted

When you delete your account

Delete your account in your settings and we erase the personal data we hold about you, including your billing details. Four things survive.

  • The feedback you leave on the way out, if you leave any. We keep it with no link to you.
  • A single note that an account was deleted, carrying a link to the subscription at Lemon Squeezy that we still have to cancel by hand. It carries no personal data, not even an account identifier.
  • A daily record of which features an account used. It holds an account identifier and nothing else that points to you. Once the account is gone, that identifier matches nothing we hold and nothing anyone else holds, so the record is anonymous. We keep it to see how the service is used over time.
  • Your email address, if you asked us to stop product, promotional, or other non-billing emails. It stays on a suppression list so we can honour that request. Invoice and billing-details emails are controlled separately by the default-on Send invoices by email preference in Billing. We use the suppression-list address for nothing else, and you can ask us to remove it whenever you like.

Your invoices and payment records sit with Lemon Squeezy rather than with us, and they keep them to meet their own tax and accounting obligations. We cannot erase them on your behalf. Their privacy policy explains how to ask them about the data they hold.

Cookies

We use two kinds of cookies.

  • Strictly necessary cookies keep you signed in and protect your session: a session identifier and a security token. The service cannot work without them, so we set them without asking.
  • Analytics cookies, set by Google Analytics through Google Tag Manager, tell us how visitors use our site.

We set no analytics cookie until you agree, and if you decline we delete any that are already there. The Cookies link in the footer of every page lets you change your mind at any time.

We do not advertise, and we set no advertising or cross-site tracking cookies. The Page Analytics browser extension sets none either.

Your rights

Under the GDPR you can:

  • See the personal data we hold about you, and get a copy of it.
  • Correct it, if it is wrong or incomplete.
  • Erase it. You can do this yourself at any time by deleting your account in your settings.
  • Restrict what we do with it, in certain circumstances.
  • Take it with you, in a structured, commonly used, machine-readable format.
  • Object to anything we do on the basis of our legitimate interest.
  • Withdraw your consent at any time, where we rely on consent. What we did before you withdrew it stays lawful.

Write to support@optimisticlines.com to exercise any of these. We will answer within a month.

If you think we have mishandled your data, you can complain to a supervisory authority. Ours is the Portuguese one:

Comissão Nacional de Proteção de Dados (CNPD)
Av. D. Carlos I, 134, 1.º
1200-651 Lisboa, Portugal
www.cnpd.pt

If you live in another EU or EEA country, or in the United Kingdom, you can complain to your local authority instead.

Security

We take reasonable technical and organizational measures to protect your personal data from unauthorized access, disclosure, and misuse. No system connected to the internet can be guaranteed completely secure.

Changes to this policy

We may update this policy. The current version always lives on this page, with the date of the last change at the top. If we change something material, we will email you.

Contact us

Questions or concerns about this policy go to support@optimisticlines.com, or to OPTIMISTICLINES - UNIPESSOAL LDA, Rua Virgílio Ferreira, N.º 82, 2.º Esq., 4430-686 Vila Nova de Gaia, Portugal.