Collect less.
Explain it plainly.

This policy explains the product data Ephemetry processes to provide analytics, account access, billing, and user-authorized AI connections. It applies to the Ephemetry service; customers remain responsible for their own website notices and legal obligations.

Effective: 30 August 2026

Website visitor events

Ephemetry stores a sanitized page path, event name, referring hostname, coarse country, device category, browser family, campaign tags, and a small allowlisted set of custom properties. It does not store visitor IP addresses, full referrer URLs, cookies, local-storage identifiers, advertising IDs, form contents, or free-form visitor text.

Website experience

Real-user LCP, INP, CLS, FCP, and TTFB values are quantized and added directly to aggregate daily histograms; raw measurements and visitor keys are not retained. Click heatmaps store only totals in coarse page-relative cells and broad viewport classes. They never contain DOM text, selectors, classes, screenshots, exact coordinates, form-field interactions, or session replay. A selected heatmap remains hidden until it contains at least 10 clicks.

Short-lived uniqueness

For daily unique counts, an IP address and user agent are processed transiently at the Cloudflare edge with a random salt scoped to one site and UTC day. Only the resulting pseudonym is stored. Different days use different salts, salts are removed within 48 hours, and identifiers are never shared across sites. Experience measurements do not use this pseudonym.

Accounts, billing, and AI connections

Ephemetry stores the account, workspace, security, and site configuration needed to operate the service. Authentication and recovery secrets are hashed or encrypted as described on the Security page. Dodo Payments processes payment, tax, invoice, and subscription details for hosted purchases. When you authorize ChatGPT, Claude, or another MCP client, Ephemetry stores the client registration, your workspace-scoped grant, and hashes of short-lived authorization codes and access or refresh tokens. The connector receives only the aggregate reports available through its read-only tools.

Retention and control

Event retention is 30 days on Free, 12 months on Starter, and 24 months on Growth. Account members can export retained event fields without visitor pseudonyms or salts. Authorized members can permanently remove a site and its analytics data. Owners can erase the workspace; active billing is cancelled before deletion completes. Each user can revoke their own AI connections immediately in Settings, invalidating access and refresh tokens.

Service providers and contact

Ephemetry runs on Cloudflare Workers and D1. Dodo Payments handles hosted billing. These providers process only the service data needed for their roles. For privacy requests or questions, email support@ephemetry.com.