Privacy
What we collect, and what we never touch.
Last updated 30 September 2026.
Your ad data stays in your browser
SPRAT reads the Ads Manager table on your screen and colours it. It never sends your ad accounts, campaigns, spend or results anywhere, and it never changes anything in your account. Your rules, profiles and notes are kept in your Chrome profile’s sync storage, which Google manages under your Google account.
Who we are
SPRAT is made by Mat Guthrie, in Australia. It’s free — there’s nothing to buy. Questions and requests: hello@spratapp.com.
What we collect
| When | What | Why |
|---|---|---|
| You sign up | Your email address and the licence key we issue you | To deliver your key and let you recover it |
| You leave the marketing box ticked when you sign up, or choose Keep me posted afterwards | That you agreed, when, the exact wording you were shown, and the IP address you agreed from | To send occasional Meta Ads tips and SPRAT news, and to be able to show you consented |
| You arrive from a link | Campaign tags in the link, such as utm_source | To know which channels bring people to SPRAT |
| You activate SPRAT | Your licence key, a random installation ID created by the extension, the extension version, and when each installation last checked in | To limit each key to 3 browser installations and keep your licence working |
| Any request to our service | Your IP address, briefly | To rate-limit sign-ups and stop abuse |
Activation sends nothing about your Ads Manager account. The installation ID is random — it isn’t a hardware or device fingerprint.
Who processes it for us
- Microsoft Azure — hosts this site and the licence service. The records above are stored in Australia (Azure’s Australia East region); the service that handles requests runs in Azure’s East Asia region, in Hong Kong.
- Mailgun — sends your licence key and account emails, and passes on anything you send to hello@spratapp.com.
- Klaviyo — sends marketing emails, and only to people who ticked the box.
Mailgun and Klaviyo are based in the United States, so your email address may be processed there. We don’t sell your information or share it with anyone else.
How long we keep it
- Your sign-up and licence records: for as long as your licence exists — until you ask us to delete them.
- Marketing consent: until you unsubscribe, then only the record that you did.
- Rate-limiting records, which hold only a scrambled form of your IP address: deleted automatically within two hours.
- After you ask us to delete your record: only a one-way hash of your address, for 30 days, so a request already under way can’t bring the record back. Then that goes too.
Your choices
- Unsubscribe from marketing emails with the link in any of them.
- Ask to see, correct or delete what we hold by emailing hello@spratapp.com. Deleting your record removes your consent evidence too, and deactivates your licence.
- You can also complain to the Office of the Australian Information Commissioner, or your local data-protection authority.
This website
No cookies, no analytics, no third-party scripts. During sign-up, your browser tab keeps a random reference to your request in session storage, so the next page can show your key; it disappears when you close the tab.
Changes
If this policy changes, we’ll update this page and the date at the top.