Privacy Policy
Last updated: July 7, 2026
Who we are
KeepAnalytics ("we") provides privacy-first, cookieless web analytics. This policy covers both our customers (people with a KeepAnalytics account) and the visitors of websites that use our tracking script.
What we collect about website visitors
Our tracking script is cookieless: it sets no cookies, uses no localStorage or sessionStorage, and does no fingerprinting. For each pageview we process: the page URL and title, the referrer, browser and operating system family (from the User-Agent), device type, language, country/region/city derived from the IP address, and UTM parameters.
We never store raw IP addresses.A visitor identifier is computed as a salted hash that rotates every day, which makes cross-day tracking of an individual technically impossible. Query strings are stripped before storage. Do Not Track and Global Privacy Control signals are honored: the script sends nothing when they are enabled. Sites may optionally enable cookieless click events (outbound links, file downloads, email/phone link clicks, 404s) — these carry no additional personal data.
What we collect about customers
Account email and password (stored as a bcrypt hash), organization and website configuration, and billing status. Payments are processed by Creem; we never see or store card numbers.
Where data lives
Analytics and account data are stored on servers hosted by Hetzner in the EU. Traffic is proxied through Cloudflare. When you request AI insights, aggregated statistics (never visitor-level data) are sent to our AI provider to generate the summary.
Retention
Raw analytics events are retained for up to 5 years, then deleted automatically. Account data is kept while your account is active. Contact us to delete your account and its data.
Legal basis
Because the analytics we collect are aggregate and cannot identify an individual (no cookies, no persistent identifier, no raw IPs), sites using KeepAnalytics generally do not need a consent banner for it. For customer accounts, processing is based on the contract with you.
Your rights
You can request access, correction, export, or deletion of your data at any time by contacting us at the address below. Website visitors should contact the website owner (the data controller for their site's analytics); we act as processor for that data.
Contact
For privacy requests: [email protected]