Privacy Policy
Last updated: 2026-11-02
WhyItChanged is operated by Vitalsply LLC ("we"). This policy explains what we collect and why.
What we collect
- Account data: your email address and a salted hash of your password (we never store the password itself).
- Connector credentials you provide (for example App Store Connect, Apple Ads, Google Ads, GA4, RevenueCat, DataFast keys): encrypted with AES-256-GCM before storage, never displayed back, and used only to make read-only reporting requests on your behalf.
- Analytics data pulled from those services and events your backend sends to your ingest endpoint (for example signups, purchases, errors, user IDs you choose to send). We recommend sending pseudonymous user IDs, not names or emails.
- Optional website tracking snippet: counts pageviews by referrer/UTM channel. It sets no cookies and stores no IP addresses or visitor identifiers.
- Operational logs kept by our hosting provider (Cloudflare) for security and debugging.
How we use it
Only to provide the service: syncing and computing your dashboards, sending the Discord alerts you configure, and answering MCP/API requests made with your API keys. We do not sell data, show ads, or use your data to train AI models.
Where it lives
On Cloudflare (Workers and D1). Discord receives the alert content you configure.
Retention and deletion
Deleting an app deletes its metrics, events, purchases and credentials. To delete your account entirely, email admin@vitalsply.com from your account address and we'll remove it within 30 days.
Security
Passwords are hashed (PBKDF2-SHA256), sessions use HttpOnly cookies, API keys are stored hashed, and all traffic is HTTPS.