Privacy Policy

Pvtlytics does not collect names, emails, or passwords for account holders. Accounts are authenticated with a private access key generated entirely in your browser; we never see or store the plaintext key, only a one-way cryptographic derivation of it.

For visitors to sites using our tracking script, we record the page path, referrer, browser/OS (parsed from the user agent), screen width, and any UTM campaign parameters present in the URL. We never store a visitor's raw IP address: it is combined with the user agent, the current date, and a site-specific key, then passed through a one-way SHA-256 hash before being written to the database. Because the date is part of that hash, the same visitor cannot be correlated across different days or across different sites.

• We don't use cookies for visitor tracking.
• We don't sell or share visitor data with third parties.
• We don't retain raw IP addresses in our analytics data.
• We don't require an email address to create or use an account.

Like any web service, our hosting infrastructure keeps short-lived, rotating access logs for operational and security purposes (standard practice for essentially every website). These are separate from the analytics data described above, are not used for tracking or profiling, and are not retained long-term.

Paid subscriptions are processed by Stripe. We do not store your payment card details; Stripe handles that directly under its own privacy policy.