Privacy
Data fields and privacy
Every field Globatics stores, what is never stored, and how the cookieless design works.
This page lists every field Globatics stores, and the things it never stores. It describes the software itself: on a self-hosted server the data stays in your own PostgreSQL database and never leaves it.
Principles
- Cookieless by default: the tracker sets no cookies and writes nothing to the browser unless you add data-persist.
- IP addresses are never stored. They are used in memory for the location and the daily visitor hash, then dropped.
- Visitor ids rotate every day and can’t be linked across days or across sites.
- Data is used for the site owner’s audience measurement only. Nothing is shared with third parties or used for advertising.
- Public share links never show names, user ids or e-mail addresses.
How visitors are counted
| Mode | Visitor id | Lifetime |
|---|---|---|
| Default | sha256(daily salt + site id + IP + user agent) | One day. The salt is random, changes every UTC day, and only today’s and yesterday’s are kept. |
| data-persist (opt-in) | sha256(site id + random id in localStorage) | Until the visitor clears their storage, sends Global Privacy Control, or you call reset. |
| identify (opt-in) | Your own user id, stored next to the visitor id | Until you delete the data. |
Ids are cut to 16 hexadecimal characters. A visit (session) ends after 30 minutes without activity.
Fields we store
Per pageview or event
| Field | Example | Notes |
|---|---|---|
| Time | 2026-10-21 14:32:05 | Server receive time |
| Visit and visitor ids | ses_…, 3fc26688fbe7edba | See above |
| Type and name | pageview, signup, $rage_click | |
| Page path | /pricing | No query string, no fragment (unless data-hash) |
| Hostname and title | acme.com, Pricing — Acme | |
| Source | news.ycombinator.com, Referral | Referrer domain and channel |
| Campaign | utm_source … utm_content | The five UTM values, when present |
| Location | FR, Île-de-France, Paris, 48.86, 2.35 | From the IP at city level (GeoLite); never the device’s GPS |
| Technology | Chrome, macOS, desktop, Laptop, en-US | Parsed from the user agent and screen width; the raw user agent isn’t kept |
| Engagement | 42 s engaged, 75% scrolled | Pageviews only |
| Event props | { plan: “pro” } | Only what your code or data-glb-prop-* sends |
| Revenue | 49.90 EUR | Only when you send it |
| Click and error details | button#buy, “Apply coupon”, x/y in % | Labels are capped at 32 characters with digits and e-mails masked |
| Test flag | yes / no | Marks hits from “Send a test visit”, which reports leave out |
Per visit
Start and last-seen time, duration and engaged time, pageview and event counts, bounce, new or returning, entry and exit path, the referrer (scheme, host and path, without the query string), channel, UTMs, location, browser and OS with versions, device, screen bucket, language, revenue and conversions.
Per visitor
First and last seen, visit and pageview counts, revenue, and with identify only: your user id and the traits you send.
Operational
The daily salts, per-day counters of filtered hits by reason (no addresses), and for your account: your e-mail, name, a password hash and a session cookie for the dashboard itself.
What is never stored
- IP addresses, in any form (a test scans every table to check this).
- The full user agent string.
- Query strings and URL fragments, except the UTM values listed above.
- What visitors type: form values and editable content are never read by the tracker.
- Cookies or identifiers shared across sites.
Retention and deletion
- Raw events are kept 760 days (about 25 months) by default, configurable per site from 30 days to 10 years, and purged nightly.
- “Delete all data” in a site’s danger zone removes its events, visits and visitors at once.
- Deleting a site or your account deletes everything attached to it.
Consent
The default mode is designed for consent-exempt audience measurement: aggregate statistics for the site owner only, no cross-site tracking, no storage on the device, the IP dropped after the location lookup, daily rotating ids and a 25-month retention by default.
Your call, not ours
Cookieless doesn’t automatically mean exempt. Rules differ by country, and opting into data-persist or identify changes the analysis. Check with your regulator’s guidance or your lawyer, and mention Globatics in your privacy policy. Our privacy policy covers this website.