Privacy and cookies
What ASOWeb collects, why, and how to switch the optional parts off. Written to be read rather than to be defensible.
What this website collects
Nothing, unless you agree to analytics. There is no tracking pixel, no advertising network and no third-party script on these pages other than Google Analytics, and that only loads after you choose Accept.
If you accept, Google Analytics 4 records which pages you visit, roughly where in the world you are, and which link you used to reach the app. Your IP address is anonymised before it is stored. We use it to work out which pages are worth writing and which are not.
Cookies
| Cookie | Purpose | Set when | Expires |
|---|---|---|---|
| asoweb_consent | Remembers your analytics choice so you are not asked again | You answer the prompt | 1 year |
| _ga, _ga_* | Google Analytics: distinguishes visitors and sessions | Only if you accept | Up to 2 years |
| Firebase auth tokens | Keeps you signed in to the app | You sign in | Until you sign out |
The consent choice is stored on .asoweb.app so a decision made
here is honoured in the app, and you are not asked twice.
What the product collects
- Your account: email address and display name, from Google sign-in or from the address you register with.
- Your workspace: the apps you track, the keywords you choose, your storefronts and any notes or annotations you write.
- Public store data: rankings, listings, reviews and competitor metadata collected from the App Store and Google Play. This is public information about apps, not about people.
- Integration data: if you connect App Store Connect or Apple Search Ads, the reports those APIs return for your own apps.
Your Apple keys
App Store Connect and Apple Search Ads keys are encrypted with Google Cloud KMS before storage. They are decrypted only inside a single server invocation, to make the call to Apple you asked for, and are never sent to a browser. There is no screen anywhere that can display them back to you, which is deliberate.
Who else is involved
- Google Cloud and Firebase: hosting, authentication, database and key management.
- Stripe: payments. Card details go directly to Stripe and never reach our servers.
- Google Analytics: only if you accept.
- Apple: when you connect App Store Connect or Apple Search Ads, we call Apple's APIs on your behalf using your own credentials.
Your rights
If you are in the UK or the EU you can ask for a copy of your data, ask for it to be corrected or deleted, withdraw consent to analytics at any time, and complain to your data protection authority. In the UK that is the Information Commissioner's Office.
Analytics runs on consent. Everything else, your account, your tracked keywords, your billing records, is processed to provide the service you asked for and to meet our legal obligations.
Contact
Email privacy@asoweb.app for anything on this page, including data access and deletion requests.
Common questions
Do you sell my data?
No. We do not sell, rent or share personal data with third parties for their own marketing.
Can you read my App Store Connect or Apple Ads keys?
No. Those keys are encrypted with Google Cloud KMS before they are stored and are only ever decrypted inside a single server invocation to call Apple on your behalf. They are never returned to a browser and cannot be read back, by you or by us.
How do I turn analytics off?
Choose Decline on the cookie prompt, or use the Cookie settings link in the footer at any time. Declining changes nothing about how the site or the product works.
How do I delete my account and data?
Delete your apps from Settings, which removes their associated data, then email us to close the account. We will remove the remaining workspace records.