Privacy Policy

Web Analyzer App ("we", "us", or "our") operates the website analytics service available at webanalyzerapp.com. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using our service you agree to this policy.

1. Information We Collect

1.1 Account Information

When you create an account we collect:

• Name and email address — used to identify your account and send service emails.
• Password — stored as a one-way bcrypt hash; we never store or transmit your plaintext password.
• Billing information — if you upgrade to Pro, your payment is processed by Stripe. We store only a Stripe customer ID; we never see or store your full card number.

1.2 Website Analytics Data (data about your visitors)

When you install our tracking snippet on your website, our servers receive and process the following data about your website's visitors. This data is stored under your account and is never shared with other customers.

• Page URL and referrer — the URL of each page visit and the referring URL.
• User-agent string — parsed to derive browser name, browser version, OS, and device type (desktop / tablet / mobile). The raw user-agent string is not stored.
• IP address (geolocation only) — used transiently to determine the visitor's country and city via the ip-api.com service. The raw IP address is discarded immediately after geolocation and is never written to our database.
• Session UUID — a random identifier stored in the visitor's browser localStorage (not a cookie) to recognise returning visitors within the same browser. This identifier contains no personal information.
• Session metadata — session start/end time, duration, page-view count, entry/exit page, UTM parameters, scroll depth.
• Custom event data — any events your site fires via Tracker.track(), including name and any JSON payload you attach. You are responsible for not sending personally identifiable information in event payloads.

1.3 Usage and Log Data

We collect standard web server logs (IP address, HTTP method, response code, timestamp) for security and operational purposes. These logs are retained for up to 30 days and are not used for analytics.

2. How We Use Your Information

• To provide, operate, and improve the Web Analyzer App service.
• To authenticate you and protect your account.
• To process payments and manage your subscription via Stripe.
• To send transactional emails: account verification, password reset, uptime alerts, goal alerts, and weekly digest reports.
• To respond to support requests you send us.
• To detect and prevent abuse, fraud, and violations of our Terms of Service.

We do not sell your data. We do not use your data or your visitors' data for advertising. We do not share data with third parties except as described in Section 4.

3. Cookies and Tracking Technologies

Our tracking snippet does not set any cookies on your visitors' browsers. Visitor recognition is achieved via a random UUID stored in localStorage, which is scoped to your domain and is never sent to any third-party server.

The Web Analyzer App dashboard itself (webanalyzerapp.com) uses a server-side session cookie (XSRF-TOKEN and a Laravel session cookie) solely for authentication. These cookies are strictly necessary for the service to function and do not track you across other websites.

4. Third-Party Services

• Stripe — payment processing. When you upgrade to Pro, you interact with Stripe's hosted checkout. Stripe's privacy policy applies to data you provide during checkout. See stripe.com/privacy.
• ip-api.com — IP geolocation. Each visitor IP is sent to ip-api.com to determine country and city. The IP is not stored by us after the lookup. See ip-api.com/docs/legal.
• Bunny Fonts (fonts.bunny.net) — privacy-friendly font hosting. No Google Fonts are used. Bunny Fonts does not track users.

5. Data Retention

• Analytics data (sessions, page views, events) is retained for as long as your account is active.
• If you delete a website from your dashboard, all associated analytics data is permanently deleted within 24 hours.
• If you delete your account, all your data (account info, websites, analytics data) is permanently deleted within 30 days.
• Stripe retains billing records as required by financial regulations.

6. Data Storage Location

All analytics data — sessions, visitors, page views, events — is stored exclusively on EU-based servers distributed across multiple European locations. Your data never leaves the European Union. We do not use US-based cloud storage, data warehouses, or third-party analytics platforms to store your data.

7. Data Security

We use industry-standard security measures including encrypted connections (TLS/HTTPS) for all data transmission, hashed passwords, and access controls to protect your data. No method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data. To exercise any of these rights, email us at support@pinkontin.com.

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate data.
• Deletion — request deletion of your account and all associated data.
• Portability — request your data in a machine-readable format.
• Objection / Restriction — object to or restrict certain processing activities.
• CCPA — California residents have the right to know about and opt out of the sale of personal information. We do not sell personal information.

We will respond to verified requests within 30 days.

9. Children's Privacy

Web Analyzer App is not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us immediately and we will delete it.

10. International Data Transfers

All data is stored and processed exclusively on EU-based servers located within the European Union. We do not transfer personal data outside the EU. Because all processing takes place within the EU, standard contractual clauses and additional transfer safeguards are not required for our core service.

The only transfer of data outside the EU is to Stripe for payment processing, which operates under the EU-US Data Privacy Framework and standard contractual clauses. Stripe never receives or processes any analytics data.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email. Your continued use of the service after changes take effect constitutes acceptance of the updated policy.

12. Contact

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:
support@pinkontin.com
Web Analyzer App, webanalyzerapp.com