Privacy Policy

Overview

This Privacy Policy explains how Pulsezen ("we", "us") handles information. We deal with two very different groups of people:

1. Our customers — people who create an account to see analytics for their websites.
2. Website visitors — people who visit a website that uses Pulsezen to measure its traffic.

We collect as little as possible about both groups.

Information about our customers

When you create an account we store your name, email address and a securely hashed password. While you use Pulsezen we also store what you set up in it: the websites you add, goals, shared dashboards, API keys, email report recipients and alert channels (for example a Slack webhook address or a Telegram chat ID).

If you buy a plan, payments are handled by the payment provider you choose. We receive a confirmation and the amount paid; we never see or store full card numbers.

If you write to us through the contact form we keep your message so we can answer it.

Information about website visitors

Website owners add our tracking script to their pages. For each pageview or event the script sends:

• the page address, without its query string (campaign tags such as utm_source are kept),
• the referring website and campaign tags,
• the browser's user agent, language and screen width.

From this we derive and store the browser, operating system, device type (desktop, mobile or tablet) and the visitor's country, region and city, looked up from the IP address at the moment of the visit.

What we do not store: the IP address, the full user agent string, cookies or any identifier on the visitor's device. The script does not use cookies or local storage and does not follow anyone across websites.

How visitors are counted: to tell how many different people visited, we calculate a one-way hash (SHA-256) of the IP address, the user agent, the website and a random salt. A new salt is created every day and old salts are deleted, so the same person gets an unrelated hash the next day and visits cannot be linked across days or websites. The hash cannot be turned back into an IP address.

Website owners can also send custom events (for example "Sign-up") with properties and revenue amounts. They must not send personal data such as names or email addresses in events, properties or page addresses.

How long we keep data

Detailed visitor events are kept for the data retention period of the website owner's plan (shown on the pricing page) and then deleted. Before deletion they are summarised into daily totals (for example "120 visitors from Germany on 3 March"), which contain no visitor hashes and are kept for as long as the website exists in Pulsezen.

When a customer deletes a website, all of its data is deleted. When an account is deleted, its websites and their data are deleted too.

Who is responsible for visitor data

The owner of each website decides to use Pulsezen and what to measure. For the data of their visitors we act on their behalf, as a service provider. Website owners are responsible for telling their visitors that they use Pulsezen (for example in their own privacy policy) and for following the laws that apply to their website. Pulsezen is designed for privacy, but rules differ between countries, so website owners should check what their local law requires.

Cookies on this website

We only use the cookies needed to run this website: one keeps you signed in, one remembers your language and, for password-protected shared dashboards, one remembers that you entered the password. Your theme and cookie notice choices are saved in your browser's local storage. We don't use advertising cookies.

We may measure visits to our own public pages with Pulsezen itself, which sets no cookies.

Sharing

We don't sell data and don't share it with advertisers. We only share what is needed with the services that help us run Pulsezen: our hosting provider, our email delivery provider and the payment provider you choose. Alerts and reports are sent only to the channels and addresses you set up.

Security

Passwords are hashed, connections are encrypted and access to our servers is restricted. No system is perfectly secure, but we work hard to protect your data.

Your rights

You can see and change your account details at any time from your account page, export your statistics, and delete websites or your whole account. Website visitors who have a question about a website that uses Pulsezen should contact that website's owner first; we will help the owner answer.

Changes

We may update this policy. For important changes we will let customers know by email.

Contact

For privacy questions contact us at support@example.com.