Privacy

This page describes what Quantalog collects on the sites that embed our tracker, and what we collect from you as a customer of ours. It is written to be read, not to be survived.

What the tracker collects

When someone visits a site running our script, we receive the page path, the referrer, the screen size, any UTM parameters in the query string, and the HTTP request itself. From the request we derive the device type, operating system, browser and country.

What the tracker does not collect

• No cookies are set, and the tracker writes nothing to localStorage. (This website — not the tracker — stores one flag to remember that you closed the newsletter dialog, so it is not shown again. It identifies nobody and is never sent anywhere.)
• No cross-site identifier is created, so no browsing profile exists.
• No raw IP address is stored. It is hashed on receipt and discarded.
• No form input, keystrokes, session recordings or mouse movement.

How visitors are counted

A visitor is a SHA-256 hash of the IP address, the user agent, the site key and a salt that rotates every day. Because the salt changes daily, the same person visiting tomorrow appears as a new visitor, and the same person on two different sites produces two unrelated hashes. The hash cannot be reversed into an identity.

Data we hold about you as a customer

Your name, your email address, a bcrypt hash of your password, and the workspaces and sites you create. If you subscribe to a paid plan, payment is handled by our payment processor and we never see your card details.

Retention and deletion

Event data is retained according to your plan — 30 days on Hobby, 2 years on Pro. You can export or permanently delete a site's data at any time from the dashboard, and deleting your account removes everything associated with it.

Sub-processors

Data is stored in MongoDB Atlas and served from Vercel. We do not sell data, share it with advertising networks, or use it to train anything.

Contact

Questions about any of this go to daorbit2k25@gmail.com.