Privacy policy
Two kinds of people, two kinds of data
Quietlytics is web analytics. This policy covers people who visit a website that uses Quietlytics and customers who have an account with us.
Visitors to websites that use Quietlytics
For these visitors the website owner decides why the data is collected and we process it on their behalf. We designed the tracker to collect as little as possible.
- No cookies and no local storage. Nothing is stored on your device, and the tracker does not probe your device for identifying details.
- What we store for each pageview or custom event: the time, the site, the page path (without the query string or fragment, and with number-like parts replaced), the referring website's hostname, a coarse browser, operating system and device type, any UTM campaign labels in the address, and a visitor code.
- The visitor code is a one-way hash of the site, your IP address, your browser's user-agent and a random secret that is replaced and deleted every day. We do not store your IP address or user-agent, and for IPv6 addresses only the network part (the first half) is used. After the secret is deleted the code cannot be recomputed, so you cannot be recognised from one day to the next.
- Do Not Track and Global Privacy Control are honoured: if your browser sends either, nothing is recorded. Known bots are not recorded.
- Data is kept for the period of the website owner's plan (6 months on Hobby, otherwise up to 13 months) and then deleted.
Customers with an account
We act as the controller of this data.
- Account data: your email address, name, and a salted hash of your password (never the password itself).
- Sign-in sessions: a session cookie that keeps you signed in, plus the IP address and browser user-agent of each session, used for security. This is the only cookie we set and only on the account and dashboard pages for signed-in customers.
- Your websites: the domains you add and the verification record we check.
- Billing: handled by Stripe. We keep your plan, subscription status and Stripe's customer and subscription IDs. We never see or store your card number.
- Email: we send verification and password-reset emails, and billing-related notices, through Resend.
- AI analyst (Pro and Business): when you ask a question, the question and the aggregated figures needed to answer it (totals, top pages, referrers and similar) are sent to Anthropic's API to produce the answer. Individual events and visitor codes are not sent. Anthropic does not use API inputs to train its models.
Why we use it, and for how long
To provide the service you asked for (contract), to keep it secure, and to meet legal obligations such as tax records. Account data is kept while your account is open. Deleting a verified website deletes its analytics data. Deleting your account removes your account data; billing records may be kept as long as the law requires. Encrypted backups of the database are kept for up to 30 days, so deleted data can remain in a backup until it expires.
Who else handles data
- Render (hosting and database storage)
- Stripe (payments)
- Resend (transactional email)
- Anthropic (the AI analyst)
- Our backup storage provider (encrypted copies of the database, kept for up to 30 days)
We do not sell data and we do not use advertising or tracking services on this site.
Your rights
Signed-in customers can download their account data and each website's events as CSV, and delete their account and all its data, from the account page. Deleting an account cancels any paid plan and removes its websites and their analytics data straight away.
You can also ask us for access to, correction of, or deletion of your personal data, object to processing, or complain to your data protection authority. For data collected on a website that uses Quietlytics, contact that website's owner first; we will help them respond. Email [email protected].