隐私政策 最后更新：2026年10月15日
本译文仅为方便阅读而提供。如有任何不一致，以英文版本 为准。
数据控制者 Storelift 由常驻土耳其的个人 Volkan Günay 运营，他是你的数据的控制者。如有任何问题：hello@storelift.net 。
我们收集哪些数据 为你的账号，我们保存：你的电子邮箱 、你添加的应用标识符 （App Store ID／包名）、你的关键词 ，以及我们据此生成的测量历史 。如果你使用付费套餐，我们还会保存你的订阅状态、套餐、金额，以及你在支付服务商处的客户 ID；银行卡信息从不会到达我们这里。如果你使用联系表单，我们会保存你填写的姓名和留言。我们不收集电话号码或设备标识符；我们不设置任何自有的跟踪 Cookie（Microsoft Clarity 的 Cookie 见下文）。
网站和控制台的使用情况 为了改进产品，我们在自己的服务器上进行不使用 Cookie 的测量：你打开的页面、在页面上停留的时间、你从哪里来（例如你点击的链接）、你的时区，以及注册等操作步骤。这些记录保存在一个与浏览器标签页绑定的随机标识符下；你的 IP 地址和设备标识符不会写入其中。如果你已登录，该标签页的记录会与你的账号关联。标签页级别的记录会在 30 天后 自动删除；匿名的每日汇总（例如每日访问次数）会保留。以上数据均不与第三方共享。
在公开页面上（包括注册和邮箱验证页面），我们使用 Microsoft Clarity 了解网站的使用情况：它根据点击、滚动和鼠标移动生成热力图和会话回放。它绝不会在控制台、登录、重置密码、邀请和联系页面上加载，也不会在共享链接、退订链接等个人专属链接上加载。它不会在页面打开时加载，只会在你第一次交互（点击、按键或轻触）时加载。加载后，Microsoft 可能会在其自有域名（clarity.ms、bing.com）上设置 Cookie ；Clarity 不会在我们的域名上设置 Cookie。它不会记录你在表单字段中输入的文字：在注册和验证页面上，所有输入框以及显示你邮箱地址的那一行都会被遮盖。Microsoft 的隐私声明：privacy.microsoft.com 。
IP 地址和技术日志 上述标签页级别的记录不包含你的 IP 地址。但服务的其他部分会处理它：
每日访客统计。 为避免重复统计同一访客，你的 IP 地址和浏览器信息（User Agent）会与一个每天更换的随机值组合，并转换为一段简短的单向代码。IP 地址本身不会保存在这项统计中。随机值设置为两天后过期，代码设置为 45 天后过期。服务器日志。 发往我们 API 的请求会连同 IP 地址、浏览器信息、时间、请求的地址和结果一起记录。这些日志设置为保留两周，用于排查故障和制止滥用。防止滥用。 请求限制通过由 IP 地址和日期生成的简短代码来计数；这些代码设置为在两天内过期。如果某个地址因滥用被封禁，该地址本身会保留在封禁列表中，直到解除封禁。账号和工作区安全。 登录后，你最近一次会话的 IP 地址会保存在你的账号中。在工作区中所做的更改（例如添加或删除关键词）会连同用户、操作、时间和 IP 地址一起写入审计日志。审计日志保留 365 天，工作区的所有者和管理员可以查看。我们发送的邮件 在产品邮件、提醒邮件和新闻邮件中，我们会测量邮件是否被打开、其中的链接是否被点击。为此，邮件中会加入一张不可见的小图片，链接会经过我们的邮件服务商 Amazon Web Services 转发。这样做是为了了解哪些邮件真正有用，并减少发送其余的邮件。我们只按邮件类型和日期保存总数 ；我们不记录谁打开了哪封邮件，也不记录谁点击了什么。登录和安全类邮件（验证码、密码重置）不 做测量。如果你的邮件应用不会自动加载图片，打开情况也不会被测量。
我们测量什么 排名和竞品数据来自 App Store 和 Google Play 的公开 端点（搜索结果、评分、搜索联想词）。为此我们不会连接你的任何账号。
保存与删除 数据加密存储，不会出售。只要账号存在，测量历史就会保留。排名历史的可见范围由套餐决定：Free 30天、Pro 6个月、Studio 1年、Enterprise不限。显示范围不会导致更早的测量被删除。账号删除按下述流程处理。
账号连接 如果你想查看收入、下载量或广告数据，可以连接你自己的账号（App Store Connect、Google Play、Apple Ads、RevenueCat、Adapty、Google Analytics、AdMob）。这些凭据加密存储，不会在任何界面上回显，并会在你移除连接时删除。连接是可选的；不连接，产品也能正常使用。
RevenueCat和Adapty的webhook不只包含汇总数字，还会处理订阅与购买事件、可关联到应用最终用户的用户或档案标识符，以及产品、商店、国家、金额、来源和群组信息。标准化事件记录的保留期限设为400天，用户／群组记录设为800天；部分用户记录更新会重新计算期限。过期记录在后台删除。账号删除流程见下文。
商店测量数据与我们的模型 我们针对客户追踪的应用和关键词，在App Store和Google Play上进行公开数据测量。这些测量数据保存在共享的市场数据池（Hive）中，用于改进Storelift的预估和评分，例如关键词热度、难度和下载量预估。你连接的账号（如App Store Connect、Apple Ads或RevenueCat）中的数据，只能以汇总且无法识别具体客户的形式用于这些共享模型：单个客户的数值不会展示给其他客户，客户身份不会被用作模型特征，某个客户追踪哪些应用和关键词也不会透露给任何其他人。Google Analytics和AdMob的数据不会用于此目的（见下方关于Google账号数据的部分）。模型生成的评分和预估属于衍生数据，可以向所有客户展示。如果你删除账户，你工作区的记录会被删除；公开的商店测量数据及由此得出的汇总数据可能保留在数据池中。如对此用途有疑问或希望提出异议，请联系hello@storelift.net 。
AI与对话历史 Ask Storelift可能会将你的问题、提交的对话历史、页面上下文，以及你有权访问的报告中的相关部分发送给AI提供商，以生成回答。输入或评论文本中的个人信息也可能随之发送。
Ask的问题和回答作为工作区历史保存，保留期限设为90天。记录还包括使用的工具名称、提问用户、模型信息及反馈。历史可见范围由工作区角色和数据访问权限决定。过期记录在后台删除。该期限不代表AI提供商自身系统的保留期限。
服务提供商 我们仅为运行本服务，借助以下服务提供商处理数据：
Amazon Web Services — 托管、数据库和登录位于德国法兰克福；邮件从瑞典斯德哥尔摩发送。Polar — 付款和开票；作为记录商户（merchant of record）收取款项。Google — 如果你使用 Google 登录则用于登录；如果你连接 Analytics／AdMob 则用于其报告。Microsoft — 通过 Clarity 测量公开页面的使用情况（在第一次交互时加载；Microsoft 可能会设置 Cookie）。Anthropic — Storelift AI回答、评论回复草稿、文本建议与AI可见性测量。发送内容可能包括商店资料、关键词、评论、问题、对话和页面上下文，以及在你的权限范围内读取的报告相关部分。其中的个人信息也可能被发送。AI可见性问题也可能发送给OpenAI和Google Gemini。你连接的Slack、Telegram、Google Sheets和webhook目标会收到已启用的报告或事件。目标方的副本遵循该提供商的保留设置。
Storelift 自有的数据存储在欧盟（法兰克福）。上述部分服务提供商会在土耳其境外处理数据，主要是在美国。
来自你的 Google 账号的数据 如果你连接 Google Analytics 或 AdMob，我们只读取只读的报告数据 ：用户数、会话数、按国家/地区的细分以及广告收入摘要。我们不会更改你账号中的任何内容，也从不请求写入权限。
Storelift 对从 Google API 获得的信息的使用和传输，遵守 Google API Services User Data Policy ，包括其中的有限使用（Limited Use） 要求。具体而言：
我们仅将这些数据用于运行你在自己的控制台中看到的界面。 我们不将其用于广告，不出售，也不转让给第三方。 除非你明确允许或法律要求，任何人都不会阅读这些数据。 移除连接会删除已保存的凭证。你也可以在提供商的管理界面撤销访问权限。此前收集的报告单独保留；可通过账号删除流程或下述联系方式申请删除。 删除 如需删除账号，请用账号绑定的邮箱写信到hello@storelift.net 。我们核实请求确实来自该邮箱后，会在30天内删除账号：清理主数据库中的账号和应用记录，并请求移除登录记录。最小化的已删除账号标记另有30天到期设置；过期记录异步删除。备份按自身保留政策到期。匿名汇总另行处理。公开商店数据的共享缓存不在账号删除范围之内。付费订阅会先终止。你可以向hello@storelift.net 申请行使GDPR和KVKK下的权利（访问、更正、删除、反对、可携带）。会计所需的财务记录由Storelift和Polar按照各自义务要求的期限单独保留。为避免再次发送不受欢迎的邮件，邮件屏蔽记录也会保留。
Privacy Policy
Last updated: October 15, 2026
Data controller
Storelift is operated by Volkan Günay, an individual based in Türkiye, who is the controller of your data.
Any question: hello@storelift.net .
What we collect
For your account we store: your email , the app identifiers you add
(App Store id / package name), your keywords , and the measurement history we
produce from them. On a paid plan we also store your subscription status, plan, amount and your customer id
at the payment provider; card details never reach us. If you use the contact form we keep the name and
message you write. No phone numbers or device identifiers; we set no tracking cookies of our own (Microsoft Clarity's cookies are described below).
How the site and dashboard are used
To improve the product we run a cookieless measurement on our own servers: the pages you
open, time spent on them, where you came from (e.g. the link you clicked), your time zone, and steps such as
signing up. It is kept under a random identifier specific to the browser tab; your IP address and device
identifiers are not written to it. If you are signed in, that tab's record is associated with your account.
Tab-level records are deleted automatically after 30 days ; anonymous daily totals (e.g. daily
visit counts) remain. None of it is shared with third parties.
On public pages, including sign-up and email verification, we use Microsoft Clarity to see how the
site is used: it builds heatmaps and session replays from clicks, scrolls and mouse movement. It never loads on the dashboard, the sign-in, password reset, invitation and contact pages, or personal links such as shared links and unsubscribe links. It doesn't load when the page opens, only on your first interaction (click, key press or tap). Once loaded, Microsoft may set cookies on its own domains (clarity.ms, bing.com); Clarity sets no cookies on our domain. It does not record text you type into form fields: on sign-up and verification, every field and the line showing your email address are masked. Microsoft's privacy
statement: privacy.microsoft.com .
IP addresses and technical logs
The tab-level record above does not contain your IP address. Other parts of the service do process it:
Daily visitor count. To avoid counting the same visitor twice, your IP address and browser details (user agent) are combined with a random value that changes every day and turned into a short one-way code. The IP address itself is not stored in this count. The random value is set to expire after two days and the codes after 45 days.Server logs. Requests to our API are logged with the IP address, browser details, time, the address requested and the result. These logs are set to be kept for two weeks and are used to fix faults and stop abuse.Abuse protection. Request limits are counted with short codes derived from the IP address and the date; these are set to expire within two days. If an address is blocked for abuse, the address itself stays on the block list until the block is lifted.Account and workspace security. When you are signed in, the IP address of your most recent session is stored on your account. Changes made in a workspace (for example adding or deleting a keyword) are written to an audit log with the user, the action, the time and the IP address. The log is kept for 365 days and can be seen by the workspace owner and admins.
Emails we send
In our product, alert and newsletter emails we measure whether an email was opened and whether its links
were clicked. To do this, a small invisible image is added to the email and links are routed through our email
provider, Amazon Web Services. We do this to see which emails are actually useful and to send fewer of the rest.
We keep only total counts per email type and day; we don't record who opened which email or
what they clicked. Sign-in and security emails (verification codes, password resets) are not
measured. If your email app doesn't load images automatically, opens aren't measured either.
What we measure
Rank and rival figures come from the public endpoints of the App Store and Google Play
(search results, ratings, autocomplete). We don't connect to your accounts for these.
Retention and deletion
Data is stored encrypted and never sold. Measurement history is kept for as long as your account exists; your
plan sets how far back the screens can look (rank history: Free 30 days, Pro 6 months, Studio 1 year, Enterprise unlimited), and older data is not deleted.
Account deletion follows the process below.
Connections
If you want revenue, download or ad figures, you can connect your own accounts (App Store Connect, Google
Play, Apple Ads, RevenueCat, Adapty, Google Analytics, AdMob). These credentials are stored encrypted, never shown back on any screen, and
deleted when you remove the connection. Connecting is optional; the product works without it.
RevenueCat and Adapty webhooks contain more than aggregate figures: we also process subscription
and purchase events, user or profile identifiers that can be associated with an app end user,
product, store, country, amount and source or cohort information. Normalised event records receive
a 400-day retention setting and user or cohort records an 800-day setting; some user record updates
renew that period. Expired records are removed in the background. Account deletion is described below.
Store measurements and our models
We keep the public App Store and Google Play measurements we make for the apps and keywords our customers track in a shared market data pool (Hive), and use them to improve Storelift's estimates and scores, such as keyword popularity, difficulty and download estimates. Data from accounts you connect, such as App Store Connect, Apple Ads or RevenueCat, can feed these shared models only in aggregated, de-identified form: one customer's figures are never shown to other customers, customer identity is not used as a model feature, and which apps and keywords a customer tracks is not revealed to anyone else. Google Analytics and AdMob data is not used for this (see the Google section below). The scores and estimates the models produce are derived data and may be shown to all customers. Deleting your account removes your workspace's records; public store measurements and aggregated data derived from them may stay in the pool. To ask about this use or to object to it, email hello@storelift.net .
AI and conversation history
Ask Storelift may send your question, the conversation history you submit, page context and relevant
parts of reports you are authorised to access to the AI provider to prepare an answer. Personal
information in an input or review text may also be included in the content sent.
Ask questions and answers are stored as workspace history with a 90-day retention setting. A record
also includes the names of tools used, the requesting user, model information and any feedback.
History visibility depends on workspace roles and data access permissions. Expired records are
removed in the background. This period does not describe retention in the AI provider's own systems.
Service providers
We process data with these providers only to run the service:
Amazon Web Services — hosting, database and sign-in (Frankfurt, Germany); email delivery (Stockholm, Sweden).Polar — payments and invoicing; as merchant of record it takes the payment.Google — sign-in if you use Google; Analytics/AdMob reports if you connect them.Microsoft — usage measurement on public pages via Clarity (loads on first interaction; Microsoft may set cookies).
Anthropic — Storelift AI questions, review reply drafts, text suggestions and AI visibility
measurement. Sent content may include store details, keywords, review text, your question, conversation and page context, and parts of reports accessed within your permissions. Personal information in these inputs may also be sent.
AI visibility questions may also be sent to OpenAI and Google Gemini. Slack, Telegram, Google Sheets and webhook destinations you connect receive enabled reports or events; destination copies follow that provider’s retention settings.
Storelift's own data is stored in the EU (Frankfurt). Some of the providers above process data outside Türkiye, mostly in the US.
Data from your Google account
If you connect Google Analytics or AdMob, we read read-only report data only:
user counts, sessions, country breakdown and ad revenue summaries. We change nothing in your
account and never request write access.
Storelift's use and transfer of information received from Google APIs adheres to the
Google API Services User Data Policy
, including the Limited Use requirements. In practice that means:
We use this data only to run the screens you see in your own dashboard.
We do not use it for advertising, do not sell it, and do not transfer it to third parties.
No human reads it — unless you explicitly permit it or the law requires it.
Removing a connection deletes its stored credentials. You can also revoke source access in the provider console. Previously collected reports are retained separately; use account deletion or the contact below to request their removal.
Deletion
To delete your account, email hello@storelift.net from the address on the account. We verify that the request came from that address and delete the account within 30 days: account and app records are cleaned from the primary database and removal of sign-in records is requested. A minimal deleted-account marker has a further 30-day expiry setting; expiry processing is asynchronous. Backups expire under their own retention policy; anonymous totals are separate. If you have a paid subscription it is ended
first. You can also exercise your rights under GDPR and KVKK (access, correction, deletion, objection,
portability) by emailing hello@storelift.net . Financial records
needed for accounting are retained separately by Storelift and Polar for the periods required by
their applicable obligations. Email suppression records are also retained during account deletion
to prevent unwanted email from being sent again. Shared caches of public store data are outside
the scope of account deletion.