Privacy Policy

Last updated: 2026-07-24.

Who we are

Dwell is operated by Spark Technology, Inc., a Delaware corporation ("we," "us," "Dwell"). This policy describes what we collect, why, and what your rights are.

What we collect from your account

When you sign up, we store your email address and a hashed password. We use your email to identify your account and to send occasional service‑related messages. We don't send marketing email.

What the snippet collects from your site's visitors

The Dwell snippet, installed on pages you control, sends a small pageview event per page load and a follow‑up "still here" beacon every ten seconds while a visitor is on the page (capped at one minute). The events include:

• The URL of the page (origin + path, no query string or fragment).
• The referrer (usually a search engine hostname).
• The user agent string.
• The IP address, used to attribute traffic source and stored with the pageview.
• A per‑session identifier stored in the browser's sessionStorage (cleared when the tab closes).
• The arm assignment for any experiments running on the page.

We do not use cookies for tracking. We do not fingerprint visitors. We do not build cross‑site profiles. Dwell itself uses one first‑party HTTP cookie (dwll_s) to keep you signed in to your dashboard on r.dwll.at — it's not used for tracking and isn't shared.

What we pull from Google Search Console

If you connect Search Console, we use OAuth to obtain a refresh token scoped only to webmasters.readonly. We use it to pull daily impressions, clicks, position, and CTR data for the property you select, and store it in our database. Disconnecting purges this data.

Dwell's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How we use your data

Your data is used to render your Dwell dashboard, compute experiment results, and operate the service. We do not sell your data, share it with advertisers, or share it with other Dwell customers. Access to your data by Dwell staff is limited to what's needed to operate, support, and improve the service.

Where your data lives

Data is stored in MongoDB Atlas (US region) and Heroku (US region). Both are subprocessors we rely on to operate the service.

How long we keep it

Pageview and Search Console data is retained for as long as your site exists in Dwell. Deleting a site purges all data associated with it. Deleting your account (after first deleting your sites) purges your user record and login sessions.

Your rights

You can view and delete your data from within Dwell at any time. If you're in a jurisdiction with additional privacy rights (EU, UK, California, etc.), those apply on top of what's above — email us and we'll help.

Security and breach notification

We take reasonable steps to protect your data. In the event of a security breach affecting your data, we'll notify you by email without undue delay after we become aware of it.

Contact

Privacy questions or requests: hello@dwll.at.