Privacy

Stored

For each event: time, page path, the referring site, UTM medium and campaign, country, browser, operating system, device class, and custom event properties.

Not stored

• No IP addresses. The IP is used once to compute a visitor hash and look up its country in a local database, then discarded. It is never sent to a third party.
• No cookies, local storage or fingerprints on the visitor's device.
• No cross-site or cross-day tracking. The visitor hash includes a random salt that is replaced every day, and old salts are deleted. Yesterday's visitors cannot be linked to today's.

Consequences

• A person who visits on three different days counts as three visitors in a multi-day report.
• Countries come from a local IP database set with GEOIP_DB (any country .mmdb, such as DB-IP Country Lite or GeoLite2 Country), or from a proxy header such as Cloudflare's CF-IPCountry set with COUNTRY_HEADER. The header wins when both are present. The hosted service uses IP Geolocation by DB-IP (CC BY 4.0).

Web Vitals are stored per page load without any visitor or session id.