Privacy policy
This policy covers Vitals by DATA HIT at vitals.datahit.co.
Last updated 14 November 2026
In brief: how Vitals handles data
This summary describes what Vitals does. The full policy below is the legal text.
- What Vitals asks Google for
- Two read-only scopes: analytics.readonly to read Google Analytics 4 property settings, key events and daily totals, and tagmanager.readonly to read the published Google Tag Manager container and its versions. Signing in with Google also shares your email address (openid, email).
- Planned, not asked for yet
- Two optional reads are planned for later, both off unless you turn them on: GA4 change history (analytics.edit, which Google requires for that history; Vitals never writes), and the list of users on a property (analytics.manage.users.readonly). Vitals does not ask for either today. This policy will be updated before it does.
- What Vitals stores
- Configuration from Google Analytics and Tag Manager, daily aggregate totals, the cookies and requests seen when it checks your pages, daily order counts and revenue if you upload them, and the findings, usual ranges and change log it builds from these.
- What it never stores
- Event-level Google Analytics data, user or visitor identifiers, order line items or customer data.
- How long
- Raw API responses, page-check logs and screenshots: 90 days. Findings, change events and daily totals: 400 days.
- Removing it
- Revoke in Vitals deletes the Google tokens and all stored findings and baselines for that property in the same request. You can also remove Vitals in your Google Account permissions or in Property Access Management.
- Who processes it
- Cloudflare (hosting and storage), Fly.io (the browser for page checks, in London and Frankfurt), Resend (email delivery), Stripe (payments) and Anthropic (writes the plain-English explanation of a finding from its template and evidence, never from raw Google Analytics rows; processed in the US or globally).
- Security
- Google access tokens are encrypted at rest.
- Page checks
- Vitals visits pages as DataHitMonitor/1.0 (+https://vitals.datahit.co/bot) and follows robots.txt when finding pages. Shared free scan results are not indexed, expire after 90 days and show no cookie values.
1. Who we are
Vitals by DATA HIT (“Vitals”) is run by DATA HIT Ltd, registered in England and Wales, company number 16416244. Registered office: Department, 4 The Boulevard, Leeds, England, LS10 1PZ. In this policy “we” and “us” mean DATA HIT Ltd.
We are the controller of the personal data described in this policy. Where you use Vitals to check a website you run for a client, you remain responsible for that client's data in your own systems; Vitals only reads the configuration and totals described below.
Contact: hello@datahit.co, or by post to the registered office above. ICO registration number: ZC072763.
2. What we collect
We collect only what Vitals needs to run its checks and send you the results.
- Your account. Your name and email address from your DATA HIT account, and the email addresses you choose to receive Vitals' emails.
- Billing. Your plan and subscription status. Card payments are handled by Stripe; we never see or store your full card details.
- Your Google connection. The email address of the Google account you connect (Google's
openidandemailscopes), and an encrypted refresh token so Vitals can keep reading. - Google Analytics and Tag Manager. For the properties you choose only: configuration (settings, data streams, key events, custom definitions, links, tags, triggers, variables, consent settings and versions) and daily aggregate totals. No individual events, visitor identifiers or BigQuery export rows.
- Page checks. When Vitals opens pages on your website, it records the cookies set and requests sent under each consent choice, with screenshots. It does not record what visitors to your site do.
- Order totals. If you upload them, daily order counts and revenue. No order lines or customer details.
- Free scan. The web address you ask us to scan, and your IP address, which we use to apply the scan limits and prevent misuse.
- Using this website. A session cookie while you are signed in, and server logs kept by our hosting provider for security.
3. How we use it, and our lawful basis
- To provide Vitals (run checks, write findings, send your weekly email, take payment): performance of our contract with you.
- To keep Vitals secure and prevent misuse, including the free scan limits: our legitimate interests in running a safe service.
- To keep business and tax records: our legal obligations.
We send you service emails about your account and the sites Vitals checks. We do not send marketing emails from Vitals without your consent, and we do not sell personal data.
4. Data from Google
DATA HIT Monitor's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In practice this means:
- Vitals asks for read-only access to Google Analytics (
analytics.readonly) and Google Tag Manager (tagmanager.readonly), and reads only the properties you tick. - Data from Google is used only to produce your own tracking health checks and reports.
- It is not sold, not used for advertising and not shared with anyone except the service providers in section 5, who process it only to provide Vitals.
- It is not used to develop, improve or train generalised AI or machine learning models.
- No one at DATA HIT reads it unless you ask us to (for example, for support), it is needed for security or to comply with the law, or it has been aggregated and anonymised for internal operations.
6. Transfers outside the UK
Our database is held in Western Europe. Anthropic, Resend, Stripe and Fly.io are United States companies and may process data there, and Cloudflare operates a global network. Where data leaves the UK, we rely on UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework where the provider is certified) or the International Data Transfer Addendum to the EU Standard Contractual Clauses.
7. How long we keep it
- Raw Google API responses, page-check logs and screenshots: 90 days.
- Results of each individual check run: 90 days.
- Findings, change history and daily totals: up to 400 days while the property is monitored.
- Free scan results: 90 days.
- Account details: while your account is open.
- Billing records: six years, as UK tax law requires.
When you stop monitoring a property, or remove the Google account it uses, Vitals deletes that property's stored data and token in the same request. You can also remove Vitals' access at any time in your Google Account permissions.
8. Your rights
Under UK data protection law you can ask us for a copy of your personal data, and ask us to correct it, delete it, restrict or object to how we use it, or send it to you or another organisation in a portable form. Some rights depend on the lawful basis we rely on.
Email hello@datahit.co to use any of these rights. We reply within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk, though we would like the chance to put it right first.
10. Changes to this policy
We will update this policy when Vitals changes how it handles data, including before it asks Google for any further access. We will tell account holders by email about any significant change. The date at the top shows the latest version.
11. Contact
Questions about this policy or your data: hello@datahit.co, or write to DATA HIT Ltd, Department, 4 The Boulevard, Leeds, England, LS10 1PZ.