Privacy and data handling

What is never stored

• Raw IP addresses. The address is used for the geographic and range lookups inside our worker and then discarded. It is never written to storage and never logged.
• Cookies or any browser storage. Nothing is written to the visitor's device at all.
• The contents of forms. A form submit records the form id or name, never a field value.

How a visitor is counted

A visitor is identified by a hash of the IP address, user agent, site id, and a salt that rotates every day. The hash cannot be reversed to an address, and it changes daily, so the same person on two different days counts as two visitors. That is a real accuracy cost and it is the price of not tracking anyone across days.

Retention

Individual event rows are kept for 12 months and then deleted automatically. The hourly aggregates the dashboard reads are kept longer, because they contain no identifier at all.

Consent banners

Because the tracker sets no cookies and writes nothing to the visitor's device, it does not by itself require a cookie consent banner. Whether your site needs one for other reasons depends on what else you run and on your jurisdiction, and this documentation is not legal advice.