Private by design

We count visits, not people. No cookies, no consent banner.

What we collect

  • Page path & referrer
  • Device / browser / OS type
  • Coarse region & language
  • Visitor hash (rotates daily)

What we never collect

  • Cookies
  • Raw IP addresses
  • Precise location
  • Identity trackable across days

How it works

  • visitor_hash rotates daily → the same visitor can’t be tracked across days.
  • user_hash = sha256(salt + TutuID) merges logged-in users across sites only; anonymous visitors are unaffected.
  • Raw events are kept briefly then hard-deleted (a guardrail guarantees zero loss).

Compliance

GDPR / PIPL-friendly · no cookie consent banner · data can be fully self-hosted.