# Privacy policy

> How atrby handles data: cookieless by default, visitor IP addresses never stored, self-hosted data stays in your account, and how to export or delete your data.

Canonical: https://atrby.site/privacy
Last updated: 2026-10-20

How atrby handles data for the hosted service and the self-host licence. Last updated 26 Oct 2026.

## In short

- By default nothing is stored on your visitors' devices. Atrby is cookieless.
- Visitor IP addresses are used for a moment to count visitors and work out the country, and are never stored.
- Data from a self-hosted copy stays in your own Cloudflare account. We never receive it.
- We do not sell your data, show ads or train AI models on it.
- Three companies process data for us: Cloudflare, Clerk and Dodo Payments.
- Questions: [sarmaasis@gmail.com](mailto:sarmaasis@gmail.com).

## 1. Who we are

Atrby runs the hosted analytics service at atrby.site and sells a lifetime self-host licence. For the hosted service we are the controller of your account data, and a processor of your visitors' analytics data on your behalf. Contact: [sarmaasis@gmail.com](mailto:sarmaasis@gmail.com).

## 2. Your visitors

- Atrby sets no analytics cookie and stores no identifier in the visitor's browser by default.
- To count visitors we combine a random daily salt, your site and the visitor's network address and browser into a one-way hash. The salt changes every day and the previous one is deleted.
- The network address is used for that hash and to work out the country and region. It is not stored.
- We store page addresses, referrers, campaign tags, device and browser type, country and region, and the events and revenue links you set up.
- Session replay is off unless you turn it on. Recordings are kept for 3 months and can mask form fields.
- Cookie mode is off unless you turn it on. If you do, you are responsible for any consent the law requires.

## 3. Your account and billing

- Account details: name, email and sign-in method, through our sign-in provider Clerk.
- Workspace and site settings, the people you invite, and the alerts you create.
- Billing details that Dodo Payments collects for us: name, billing address, tax ID, plan and invoices. We never see card numbers.
- Support and sales emails you send us.

## 4. The self-host licence

When you buy the self-host licence, Dodo Payments takes the payment as merchant of record. We receive your email, the payment reference and the licence status. We keep a one-way hash of the licence key, not the key, and we email the key to you once.

A self-hosted copy stores its data in your own Cloudflare account, and we do not receive that data. The install command contacts atrby.site when you run it, to download your copy with your key. A running copy does not contact us.

## 5. Services we use

| Service | What it does for us |
| --- | --- |
| Cloudflare | Hosting, tracking ingest, data storage and email delivery |
| Clerk | Sign-in and session security for the app |
| Dodo Payments | Merchant of record: checkout, invoices, sales tax and VAT |

## 6. Why we process data, and how long we keep it

- To run the service you signed up for, we process account and analytics data under our contract with you.
- To keep the service secure and stop abuse, we use logs and sign-in records under our legitimate interest.
- To meet tax and accounting rules, we keep invoices and billing records as the law requires.
- Analytics are kept for the retention your plan includes: 3 years on Starter and 5 years or more on Growth. Session replays are kept for 3 months.
- Account data is deleted within 30 days of you deleting your account.
- Licence records are kept while the licence exists, so that downloads can be checked.

## 7. Your rights

You can ask for a copy of your data, to correct it, to delete it, or to object to how we use it. You can export analytics from the app at any time. Write to [sarmaasis@gmail.com](mailto:sarmaasis@gmail.com). You can also complain to the data protection authority in your country.

Data in a self-hosted copy is yours to keep or delete. We cannot reach it.

## 8. Changes

When this policy changes we update the date at the top. For material changes we tell account owners by email before they take effect.

## Related
- [Terms of service](https://atrby.site/terms)
- [Data processing agreement](https://atrby.site/dpa)
- [Pricing](https://atrby.site/pricing)