Privacy & Cookies
Last updated: 21 June 2026
Who we are
This site and product are operated under the name Smoower ("we", "us"). We are the controller of the personal data described here. We do not sell personal data and we do not run advertising or ad-tracking networks. Questions, or to exercise your rights, email tim@smoower.com.
What we collect
- Account data — your email address, and (if you link GitHub) your GitHub handle, ID, avatar and an OAuth token we use only to verify which organisations you belong to.
- Billing data — for paid subscriptions we store a customer reference and subscription status from Stripe. Card details are entered directly with Stripe and are never seen or stored by us.
- Usage data — aggregate analytics (page views, referrer, approximate country, device class) and basic operational logs that keep the service running and secure.
- Public organisation data — the index is built from publicly available information (GitHub, YouTube, blogs, package registries, Reddit and similar sources). This is company / project data, not data about you personally.
- Discord data — only if you install our bot (see below).
Why we use it (legal bases)
We process account and billing data to provide the service and fulfil our contract with you; analytics and security logging on the basis of our legitimate interest in running and improving a reliable service (and, for analytics cookies, your consent); and public organisation data on the basis of legitimate interest in maintaining a public benchmark. Where a listed organisation is your employer or project, you can claim or request removal of its entry.
Where we host & who processes your data
Smoower is built and hosted on Lovable Cloud. The application runs on Cloudflare's global edge network, and our database and authentication run on Supabase (PostgreSQL). We share data with the following sub-processors strictly to operate the service:
| Provider | What they process | Region |
|---|---|---|
| Lovable | Application hosting platform and AI request routing (Lovable Cloud & AI Gateway) | EU / US |
| Cloudflare, Inc. | Edge compute, content delivery and security for the application | Global edge |
| Supabase | Database, account authentication and file storage | EU / US |
| Stripe | Subscription payments and billing (card data is handled by Stripe, never stored by us) | EU / US |
| AI model inference (Gemini, via the AI Gateway), YouTube statistics, site analytics and fonts | EU / US | |
| Firecrawl | Fetching and reading the public web pages we analyse | US |
| GitHub (Microsoft) | Sign-in (OAuth) and public repository / organisation data | US |
| Discord | Community metrics collected by the Smoower bot when you install it | US |
| Public mention search across communities | US |
The Smoower Discord bot
If you add the Smoower bot to a Discord server, it scans activity to produce community statistics. It does not store the content of any messages. It records only aggregate numbers — member counts and growth over time, and approximate message volume on the channels you choose to track. Once a day it reads a random sample of recent messages to estimate community sentiment; only the resulting scores and a short, AI-written paraphrase are stored — never the original messages.
The server's administrators decide which channels the bot can see. Member counts may be shown publicly on the organisation's index page; growth and sentiment remain private to the product. Remove the bot from your server at any time to stop all collection.
Analytics & cookies
We use Google Analytics 4 to measure aggregate traffic. Analytics cookies only load if you accept them in the consent banner; if you reject, Analytics runs in cookieless mode with IP anonymisation and no identifiers are stored on your device.
We also use a small set of strictly necessary first-party cookies and localStorage keys to remember your theme, dismissed announcements and your cookie-consent decision. These are required for the site to work and are not used for tracking. Fonts are loaded from Google Fonts, which may receive your IP address as part of delivering them.
To change your analytics consent, clear the smoower.consent.v1 entry in your browser's site data for smoower.com and reload — the banner will reappear.
How long we keep it
We keep account and subscription data for as long as you have an account, and for a short period afterwards to meet legal and accounting obligations. Operational logs and time-series snapshots are retained on a rolling basis and downsampled or deleted over time. You can ask us to delete your account and associated personal data at any time.
Your rights
Subject to applicable law (including the GDPR / UK GDPR), you can request access to, correction of, or deletion of your personal data, object to or restrict certain processing, and request a copy in a portable format. You may also withdraw analytics consent at any time. To exercise any of these, email tim@smoower.com. You have the right to complain to your local data-protection authority.
International transfers
Some of our sub-processors are based outside your country, including in the United States. Where data is transferred internationally, it is protected by appropriate safeguards such as the providers' Standard Contractual Clauses and equivalent mechanisms.
Children
Smoower is intended for professional use and is not directed at children under 16. We do not knowingly collect personal data from children.
Changes
We may update this policy as the product evolves. Material changes will be reflected by the "last updated" date above and, where appropriate, an in-product notice.