Data collection
Transparent data practices. Know exactly what we collect.
What we collect
For each page view, we collect:
| Data | Example | Purpose |
|---|---|---|
| Page URL | /blog/hello-world | Track page views |
| Referrer | google.com | Traffic source |
| UTM parameters | utm_source=twitter | Campaign tracking |
| Country | US | Geographic reports |
| City | San Francisco | Geographic reports |
| Device type | mobile | Device breakdown |
| Browser | Chrome | Technology reports |
| Operating system | macOS | Technology reports |
| Timestamp | 2026-01-23T10:30:00Z | Time-based analysis |
What we don't collect
- IP addresses (used for geo-lookup only, never stored)
- Names, email addresses, or other personal information
- Cookies or persistent identifiers
- User-Agent strings (parsed for device/browser, then discarded)
- Screen resolution or window size
- Mouse movements or clicks (except tracked outbound links)
- Form inputs or page content
- Any data that could identify an individual
How location is determined
We determine country and city using the visitor's IP address:
- IP address is received with the page view request
- We look up the country and city using a geo-IP database
- Only the country code and city name are stored
- The IP address is immediately discarded
This means we know "a visitor from San Francisco" but not "which visitor" or their exact location.
Custom events
When you track custom events, we store:
- Event name (e.g., "signup_click")
- Event properties (e.g.,
{ button: "hero" }) - Page URL where the event occurred
- Timestamp
- Same visitor/session identifiers as page views
Important
Never include personal data in event names or properties. Instead of glyphex('signup', { email: 'user@example.com' }), use glyphex('signup').
Data retention
Analytics data is retained indefinitely by default. You can:
- Export your data anytime (Settings → Export)
- Delete your site to remove all associated data
- Contact support for custom retention policies
Data export
You own your data. Export it anytime:
- Go to your site's Settings page
- Click "Export data"
- Choose the date range
- Download as CSV
Exports include all page views and events with their associated data.
Data security
- All data encrypted in transit (HTTPS/TLS)
- All data encrypted at rest (AES-256)
- Access restricted by row-level security policies
- No shared access between customers
- Regular security audits