Data protection
Built to pass a data protection review
What is recorded about the people who visit your website, where it is kept, and the agreement that covers it. Written for whoever signs it off.
- Cookies
- None
- Stored on the device
- Nothing
- Data leaving the EU
- Never
- Cross-site tracking
- Impossible by design
The texts below are the same ones visitors read in our privacy policy.
What we record
For each visit we record the pages viewed without their query string, the website you came from, campaign tags in the address (utm_source, utm_medium, utm_campaign and the like), your country, your browser's language, the type of device, browser and operating system, a screen width range, and how long each page was in view and how far it was scrolled. We also record clicks on links to other websites and file downloads and, only if the website owner has turned it on, what you searched for on the website. Visits are grouped using a visitor identifier calculated on our server from your IP address, your browser and the website together with a secret value and the date, so it changes every midnight and differs from one website to the next. The owner may also record events they name themselves, such as a completed ticket purchase.
What we do not record
The statistics hold no IP address, no full browser identification string and no exact screen size, we set no cookies and we store nothing on your device. Because the website is part of the identifier, a visit to one of our customers cannot be linked to a visit to another, and because it changes every day, not to your visit tomorrow either. If your browser sends a Do Not Track signal, nothing is sent at all. The server that receives the visits keeps no access log of visitor IP addresses, and its error messages do not record them.
Where it is kept, and for how long
The statistics are stored on our own servers in Germany and are not passed to any third party. Each record is kept for the period set for that website, 13 months unless the owner has agreed otherwise, and is then deleted automatically. When the owner deletes a website from their account, its statistics are deleted with it.
Your rights as a visitor
For these statistics the website owner is the controller and we act on their behalf, so a request is best sent to the website you visited. Because the identifier changes every day, we generally cannot pick out one particular person from the statistics alone. If you write to us, we will help the website owner answer.
An agreement you can read first
InfoPeak Analytics has its own data processing agreement under GDPR Article 28, in English and German. It is accepted once per account from the site page and covers every site on it. Read it before you sign up.
One sub-processor
Contabo GmbH runs the servers and the database in Germany. Visitor data is not passed to any other company and does not leave the EU. Payment for a paid plan goes through Stripe and concerns you as a customer, not your visitors.
Questions
Do we still need a consent banner?
Where does the data live?
What about heatmaps and session recordings?
Ready when you are
Add one line. See the numbers tomorrow.
Free up to ten thousand page views a month, on one domain. No card.