Privacy and cookies
Who we are
ferrik.io is run by Sixteen K Limited, registered in England and Wales, company number 17412524. Our registered office is C/O Cutts & Co, Eden Point, Three Acres Lane, Cheadle, SK8 6RL. We decide how the information on this page is used, which makes us the data controller for it.
This page is about the ferrik.io website. The Ferrik app is a separate thing: it runs on your computer and keeps your crawl results there.
What we collect
If you only read the site, the one thing we store is the choice you make about cookies. We collect nothing else unless you turn on analytics or give us your email address.
Cookies
Here is every cookie this site can set, what each one does and how long it lasts. The essential one is always on. The rest are up to you.
- Essential — always on
- Needed for the site to work: remembering your cookie choices. Always on.
- Analytics
- Google Analytics 4, so we can see which pages are used and how the site performs. Off until you allow it.
| Name | Category | What it does | How long it lasts | Set by |
|---|---|---|---|---|
ferrik_consent | Essential | Remembers the cookie choices you made here and the version of this list you agreed to. | 12 months | ferrik.io |
_ga | Analytics | Distinguishes one visitor from another so Google Analytics 4 can count visits. | 2 years | Google (Google Analytics 4) |
_ga_TMLLNRH15P | Analytics | Keeps the state of a visit for Google Analytics 4. | 2 years | Google (Google Analytics 4) |
Your light or dark setting is not a cookie — your browser saves it — but the same rules cover it, so it is listed here too.
| Name | Kind | Category | What it does | How long it lasts |
|---|---|---|---|---|
ferrik-theme | local storage | Essential | Remembers your light or dark preference. | Until you clear it |
You can change your mind whenever you like: the Privacy and cookies link at the foot of every page brings you back here. Turn analytics off and we stop it and delete the cookies it set. We will ask you again in 12 months, or sooner if this list changes.
Analytics
If you turn on analytics cookies, we use Google Analytics 4 to see which pages people read. It tells us the pages you looked at, how you got here, your device and browser, roughly where you are from your IP address, and gives you an id so we can tell one visitor from another. None of it is used for advertising.
We only do this if you say yes, and you can change your mind at any time.
Google handles that data for us and only does what we tell it to. We do not sell it and we do not pass it to anyone else.
Google keeps it for 14 months and then deletes it.
Google may handle it outside the UK, including in the United States. Our contract with Google covers that with the Standard Contractual Clauses, the safeguard UK law provides for.
Light and dark
When you choose light or dark, your browser remembers it. It never leaves your browser, and clearing your browsing data clears it.
Search Console
We use Google Search Console to see how this site turns up in Google's results. It sets no cookie here and takes nothing from your visit.
The launch list
If you give us your email address we keep the address, the date, what you agreed to, and whether you confirmed it. We do not ask for your name and we do not keep your IP address.
One email to confirm, one when Ferrik launches. You can unsubscribe at any time through the link in the email.
The launch email asks whether you would like to keep hearing from Ferrik. Say yes and we keep your address with that new permission recorded. Say nothing and we delete it, because that email is the last one you agreed to.
Unsubscribe and we delete your address there and then. If you never confirm it, we delete it after seven days.
Deleting removes your address from our list straight away. Our database provider keeps rolling backups for up to 30 days that could put the whole list back to an earlier moment; we would only ever use them to recover from a fault, never to bring an address back, and after 30 days no backup holds it.
If you tell your email provider that one of our emails is spam, we delete your address and keep a one-way fingerprint of it so the form cannot take it again. The fingerprint is not your address, but it is still information about you, and you can ask us to remove it.
Resend sends those emails for us. We use its Ireland sending region, but Resend stores its service records in the United States. It keeps the email content and delivery logs for 30 days on our plan, with backups for up to seven more days. Our contract with Resend uses the Standard Contractual Clauses and the UK Addendum to safeguard that transfer.
Cloudflare Turnstile checks the form to tell a person from a bot.
Your account, your team's seats and licence checks
You need an account only if you pay for Ferrik or someone gives you a seat. This is what we hold.
| What | Why we hold it | How it's kept |
|---|---|---|
| Your email address | To sign you in, send you codes and tell you about your account | As you typed it |
| Your passkeys | To sign you in without a password | The public half only, plus the name you gave it and when it was last used. Your fingerprint, face or PIN never leaves your device |
| Recovery codes | To get you back in if you lose your passkeys | Scrambled one-way. We can't read them or show them again |
| Sign-in sessions | To keep you signed in, and let you sign out other devices | A scrambled reference with its dates. No IP address and no browser details |
| A scrambled form of your network address | To limit repeated sign-in attempts from one connection | Scrambled one-way and kept for the length of the limit, an hour at most. We never store the address itself |
| Seat assignments | So the people on your plan can use Ferrik | The email address of each person given a seat |
| Registered computers | To count the computers each seat is used on | Windows or macOS, a name you can give it, a public key, and a one-way fingerprint of the machine. We never receive the machine's serial numbers, its name or your Windows user name |
| Licences | To prove to the app what your plan includes | The signed licence we issued. It names your account, seat and computer by random reference, never by email or name |
| A security log | To investigate misuse and prove who changed what | References and dates. No email addresses in the clear |
If you give someone a seat
You type their email address, and we use it only to let them activate Ferrik and to tell them about their seat. Please make sure they're expecting it. As the account owner you can see, for each of their computers, its name, whether it's Windows or macOS, when it was activated and when it last checked in. You can't see their crawl data, and neither can we.
Licence checks
On a paid plan the app contacts our licence service when you activate it and then from time to time, so it knows your plan is still active. To activate a computer, Ferrik sends your email address, a scrambled code made from your computer's ID (never the ID itself) and, if you type one, the computer's name. Each check sends the reference of your registered computer and a signed proof that it's the same computer. It doesn't send your crawl data, the sites you work on, or anything about what you do in Ferrik. If the service can't be reached, your plan keeps working for 3 days.
If you lose everything
If you lose your passkeys, your recovery codes and your email, we can recover your account by hand. We'll ask for proof that it's yours, such as the last four digits of the card you pay with and the date of a recent payment, and for a company we check its public record at Companies House. We keep a short note of what we checked, not copies of documents.
Paying, and the emails we send
Paying
When you buy Ferrik, Sold Through Link, LLC, Stripe's merchant of record, sells it to you and collects the payment ("Sold through Onelink" in the UK, "Sold through Link" elsewhere). It takes the payment, works out the tax, and sends your receipts and invoices. Your card statement shows ONELINK* FERRIK or LINK.COM* FERRIK. Sixteen K Limited stays responsible for the personal data we handle ourselves, as this policy describes.
- Link (Onelink in the UK) holds your payment details: your card, billing name and address, and invoices. It does so under its own terms and privacy policy, as a separate controller.
- We never see your card number. In our Stripe account we can see the last four digits, your billing name and address, and your payment history, so we can answer billing questions and check who you are if you ask us to recover your account.
- In our own records we keep your plan, the number of seats, the currency, the country you bought from, the amounts charged, and whether each payment succeeded, failed, was refunded or was disputed. We also keep a scrambled reference to Stripe's record of each payment, and to who confirmed each plan change.
- Your subscription's reference: in full for 12 months after your account closes, then only in scrambled form for the rest of the 6 years.
- You can manage your subscription with Onelink directly: change your card, cancel, or ask for a refund. If you ask Onelink to delete your data, it cancels your subscription and removes your records from its systems. Your paid plan runs to the end of the period you've paid for, and we'll ask whether you'd like us to delete the records we hold too.
Emails
We send email through Resend. We send:
- sign-in and recovery codes;
- messages about your account and seats, such as a seat being given or removed;
- the launch announcement, if you joined the launch list (section 6).
We don't send marketing email unless you've asked for it. Resend receives the recipient's address and the content of each message, and keeps its delivery records for 30 days. Records of the emails we send you, such as when each was sent and whether it arrived, are kept for 12 months. If an address bounces or you mark a message as spam, we stop sending to it and keep a scrambled form of the address so we don't try again.
Your rights
You can ask us what we hold about you, ask us to correct it or delete it, tell us to stop using it, or take back a permission you gave. Email privacy@ferrik.io and we will answer within a month.
If we do not put it right, you can complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk.
Write to privacy@ferrik.io, or read more at Information Commissioner's Office.
Changes to this policy
If we change this page we will update the date below. If the change affects what we collect or why, the cookie banner will ask you again.
Last updated 17 October 2026.