Privacy Policy

Last updated: 5 October 2026

1. Who we are

Squirrel is a trading name of Obsidian IO Limited, registered in England and Wales (company number 12699449), 3 Cheapside Road, Ascot, SL5 7QR. We are the controller of the personal data described in this policy. Contact us at contact@getsquirrel.co.

Where we process personal data on behalf of a publisher client to provide our service, we act as that client's processor and the client's privacy policy applies.

2. The data we collect

If you do not give us the details we need to set up an account, we cannot provide the service.

3. How we use it and why

4. Business contacts

We may contact people at publishers and related businesses about Squirrel using business contact details. If we did not get your details from you, we will tell you where we got them when we first contact you. You can opt out of marketing at any time, using the link in any email or by contacting us.

5. Who we share it with

We do not sell personal data. We share it only with:

• service providers who work on our behalf under contract, such as hosting, email, communication, accounting and payment providers;

• affiliate networks and retailers, when you click a Squirrel link, so a sale can be attributed;

• professional advisers, and authorities where the law requires it;

• a buyer of all or part of our business.

6. Visitors to publisher websites

When a Squirrel component loads on a publisher's website, or you click a link that goes through sqrlinks.ai, our servers receive your IP address. We keep it for a maximum of 3 days, only to protect the service against attacks, then delete it. Our click reporting does not identify you. Once you click through to a retailer, its privacy policy and that of any affiliate network applies.

7. Product search MCP server

AI assistants such as Claude and ChatGPT can connect to our product search MCP server at mcp.getsquirrel.co. It needs no account.

• It receives only the search request your AI assistant sends: the search text, country and number of results. It does not receive your conversation, your name or your account.

• Our servers receive the IP address the request comes from. A hashed form of it is kept for 2 minutes to apply rate limits, then deleted. Server logs keep IP addresses for a maximum of 3 days, as in section 6.

• Search results are cached for 10 minutes, linked to the search, not to who sent it.

• Offer links go through sqrlinks.ai, as in section 6.

We use MCP requests only to answer the search, apply rate limits and keep the service secure. We do not use them to profile anyone or for advertising.

8. How long we keep it

9. International transfers

Some of our service providers process data outside the UK. Where they do, we rely on UK adequacy regulations or approved contractual safeguards. Contact us for details.

10. Your rights

You have the right to access, correct or erase your data, to restrict or object to how we use it, to data portability, and to withdraw consent at any time. To use any of these rights, email contact@getsquirrel.co.

11. Complaints

If you have a concern about how we handle your data, please contact us first at contact@getsquirrel.co. You can also complain to the Information Commissioner's Office at ico.org.uk.

12. Cookies

We use strictly necessary cookies to make the Website work, and Google Analytics cookies only if you accept them through our cookie banner. You can change your choice at any time using the Cookie settings link at the bottom of every page.

13. Changes

We may update this policy. The date at the top shows when it last changed.