Skip to content
Features Integrations Pricing Docs
Log in Start free

Privacy & GDPR

byanalytics is designed so that you can measure your sites without collecting personal data.

What the tracker collects

  • The page URL, referrer, screen width and browser language.
  • The user agent and IP address — used once in memory to derive device type, browser, operating system and country, then discarded.
  • Custom event names and properties you choose to send.

What we never do

  • No cookies, localStorage, fingerprinting or cross-site tracking.
  • No raw IP addresses stored, ever.
  • No selling, sharing or advertising use of your data.

Anonymous visitors

To count unique visitors without cookies we compute:

hash(daily_salt + site_id + ip + user_agent)

The salt is random, rotates every 24 hours and is then deleted, so the same person cannot be recognised across days or across websites. The hash cannot be reversed to an IP address.

Do I need consent?

Because no information is stored on or read from the visitor's device and no personal data is retained, in most EU jurisdictions byanalytics can be used without a consent banner. Regulators' guidance differs between countries; ask your own legal advisor for your case.

Data processing

When you use byanalytics, you are the controller of your visitors' data and we act as processor. Our Data Processing Agreement applies automatically to every customer.

  • Raw events are kept according to your plan's retention (30 days to 2 years); aggregated statistics follow the same retention.
  • Data is hosted in the EU.
  • Deleting a site or workspace erases its data permanently.

Respecting opt-outs

Visitors can opt out manually with localStorage.setItem('byanalytics_ignore', '1'). You can expose a toggle on your privacy page that sets this key.