Data collection
Transparent data practices. Know exactly what we collect.
What we collect
For each page view, we collect:
| Data | Example | Purpose |
|---|---|---|
| Page URL | /blog/hello-world | Track page views |
| Referrer | google.com | Traffic source |
| UTM parameters | utm_source=twitter | Campaign tracking |
| Country | US | Geographic reports |
| City | San Francisco | Geographic reports |
| Device type | mobile | Device breakdown |
| Browser | Chrome | Technology reports |
| Operating system | macOS | Technology reports |
| Screen width | 1440 | Screen-size breakdown |
| Timestamp | 2026-01-23T10:30:00Z | Time-based analysis |
What we don't collect
- IP addresses (used for geo-lookup only, never stored)
- Names, email addresses, or other personal information
- Cookies or persistent identifiers
- User-Agent strings (parsed for device/browser, then discarded)
- Mouse movements (clicks are only recorded for tracked outbound links, file downloads, and rage-click detection)
- Form inputs or page content
- Any data that could identify an individual
How location is determined
We determine country and city using the visitor's IP address:
- IP address is received with the page view request
- We look up the country and city using a geo-IP database
- Only the country code and city name are stored
- The IP address is immediately discarded
This means we know "a visitor from San Francisco" but not "which visitor" or their exact location.
Custom events
When you track custom events, we store:
- Event name (e.g., "signup_click")
- Event properties (e.g.,
{ button: "hero" }) - Page URL where the event occurred
- Timestamp
- Same visitor/session identifiers as page views
Important
Never include personal data in event names or properties. Instead of glyphex('signup', { email: '[email protected]' }), use glyphex('signup').
Data retention
How far back your dashboard can query depends on your plan: 6 months on Free, 2 years on Lite, 3 years on Starter, and unlimited history on Growth. Whatever your plan, you can:
- Export your data anytime (Settings → Export)
- Delete your site to remove all associated data
- for custom retention policies
Data export
You own your data. Export it anytime:
- Go to your site's Settings page
- Click "Export data"
- Choose the date range
- Download as CSV
Exports include all page views and events with their associated data.
Data security
- All data encrypted in transit (HTTPS/TLS)
- All data encrypted at rest (AES-256)
- Access restricted by row-level security policies
- No shared access between customers
- Regular security audits