PRIVACY NOTICE · 18 SEPTEMBER 2026

Your analytics.
Your choice.

The AI Referral Dashboard is a free ChatTrack tool for understanding LLM referral traffic. Each website dashboard is private to its signed-in owner by default. Others can view its report only when the owner explicitly enables sharing as described below. Paid membership or product administrator status does not provide access.

Signing in

You can use an email code or, when available, Google sign-in. Google supplies your verified email and basic profile information to Neon, our authentication provider. This identifies your ChatTrack account. Google sign-in does not grant Analytics or Search Console access; those connections are separate and can use different Google accounts.

What you connect

You authorise read-only Google Analytics access. You choose a GA4 property and exact website hostnames for each dashboard. We retrieve session acquisition, dates, engaged sessions and landing-page paths to show your reports. No new tracking tag is installed. We do not retrieve visitor identities or install advertising cookies.

What your analytics are used for

By default, your GA4 data is used only to provide your dashboard and respond to your requests. We do not use it for sales profiling, advertising, AI training or unrelated product research. We do not sell it.

Read-only requests go from our backend to Google’s Analytics APIs. Google authentication and our hosting and database providers process the data needed to operate this service. Access is protected by account ownership checks; operational access to infrastructure remains necessary to run the service.

What we keep

We store your sign-in identity, website dashboard names, selected property and hostname settings, and an encrypted Google refresh token so you can reconnect to reports without repeated consent. Access tokens remain server-side. Normalised reports may be held in a bounded server-memory cache for up to 15 minutes. We do not persist raw Analytics reports or individual visitor records. Authorization codes and tokens are excluded from application logs.

Sign-in and account service use your email. Creating a dashboard does not subscribe you to marketing messages. Session cookies are needed to keep your account signed in.

Optional industry benchmarks

Benchmarking is off for every new website. If you separately opt in and press Contribute, we retrieve a settled calendar month and contribute two percentages: AI-attributed sessions as a share of website sessions, and engaged AI sessions as a share of AI sessions. Only complete reports with at least 100 website sessions and 20 AI sessions are eligible.

Before publication, those two numbers are privately linked to your dashboard and keyed, month-specific fingerprints of the GA4 property and owner. This is pseudonymous data, not yet anonymous: the link lets us delete unpublished contributions and prevents the same property being counted twice across users or websites and one owner creating a cohort with many websites. No domains, landing pages, source details, emails or raw traffic counts are copied into the benchmark dataset.

An industry needs at least 20 distinct owners and GA4 properties for that month. Each has equal weight. We publish rounded group averages, without exact group sizes or individual results, to opted-in users in that industry. The group is fixed after publication to avoid exposing changes from single additions or withdrawals. We then delete the contributing individual percentages and their dashboard links; a month-specific property fingerprint remains to prevent duplicate contributions.

You choose when to contribute; there is no automatic importer. Disconnecting Google, replacing the connection or changing its selected property or hostnames turns off consent and removes unpublished contributions. Published group averages are anonymous outputs and cannot be separated back into an individual contribution. They remain after you withdraw or delete your dashboard.

These are averages of contributors, not estimates representing an entire industry. Thresholds and aggregation reduce identification risk; they are not a promise of mathematical anonymity or differential privacy.

Reports you share

Your dashboard is private by default. When sharing is available, you can explicitly enable a live, view-only link for invited email addresses, anyone with the link who signs in, or anyone with the link without sign-in. Invited people must sign in with a verified invited email. Shared viewers can see the website name, selected hostnames, traffic and engagement figures, dates, acquisition sources and landing-page paths, including historical data available through the report. They can change the date range and save a PDF. They cannot manage Google connections, benchmarks or your other dashboards.

We store the access choice, invited email addresses and an encrypted sharing link until you turn off sharing or delete the dashboard. Email link opens your email app; you choose when to send. Invited addresses are placed in Bcc. A link does not provide access to your Google account or its credentials. Anyone-with-link access permits forwarding, so choose it only for analytics you want to share that way.

You can change access, replace the link or turn off sharing. Reconnecting Google or changing the selected property or hostnames requires enabling a new link. These actions stop future access; they cannot recall reports already viewed, printed or saved by recipients. Printing or saving a PDF by itself does not enable live sharing. Copies you send are controlled by you and their recipients.

Disconnect, withdraw or delete

Connection settings let you disconnect each website independently. Website & data controls let you delete the dashboard, its stored connection and unpublished contributions. Previously published group averages remain. You can also remove the ChatTrack grant in your Google Account; this may affect other websites connected through the same Google grant. We do not revoke a shared grant automatically.

Deleting a dashboard does not delete your sign-in identity or your other ChatTrack projects. For identity deletion, access questions or privacy requests, contact sam@chattrack.app. Ask before sending any sensitive analytics by email.

Google API data

Our use of data received from Google APIs follows the Google API Services User Data Policy, including applicable Limited Use requirements. Benchmarking is limited to the user-facing, explicitly opted-in feature described above. Consent does not permit unrelated use.