Privacy Policy
Last updated: August 2026
For visitors to sites we measure
We do not set cookies, do not use local storage, and do not build a profile of you. When you load a page carrying our tag we record the page path, the referring site, your country, your browser, operating system and device class, and a hash.
The hash is computed from a random daily salt, the site, your IP address and your browser string. Your IP address itself is never written to disk — it exists in memory for the microseconds it takes to compute the hash and look up a country. The salt is deleted after two days, at which point the hash cannot be linked back to an IP address by anyone, including us.
The practical result: we cannot recognise you tomorrow, cannot follow you between sites, and hold nothing that identifies you. This is why the tag needs no consent banner in most jurisdictions — but the site operator, not us, is responsible for their own compliance.
For account holders
We store your email address, your password as a salted hash, and the domains you add. That is all.
What is public
Only if you switch it on, and only aggregates: totals, top referrers, top pages, countries, browsers, devices, and the sealed daily digests. Never an individual visitor, a hash, or anything derived from one.
Third parties
Country lookup uses a local copy of the DB-IP database — your IP is never sent anywhere. We do not use advertising trackers and do not sell data to anyone.
Deletion
Delete a site and its hits and chain go with it, immediately and irreversibly. Ask through the contact page for anything else.