Analytics data inventory
Every field Privatus Analytics stores about visits and events, why it is needed, how it is minimized and how long it is kept, plus what stays in memory only.
Stored per event and visit#
| Field | Purpose | Minimization |
|---|---|---|
| Hostname and path | Pages report | Query string removed except campaign parameters and your allowlist, PII scrubbed, path masks applied |
| Referrer host and path | Sources | www./m. stripped, query string dropped, your own domains blanked |
UTM source, medium, campaign, content, term, ref |
Campaigns | Stored as sent (don't put personal data in them), click ids reduced to a yes/no "paid click" flag |
| Channel | Channels | Derived from the above |
| Country | Locations | From the CF-IPCountry header Cloudflare adds to each request. No region, city or coordinates |
| Language | Locations | navigator.language, max 16 characters |
| Device type, browser + major version, OS + major version | Technology | Parsed from the User-Agent, raw User-Agent dropped |
| Screen size bucket | Technology | xs < 414, sm < 768, md < 1024, lg < 1440, xl px, exact width dropped |
| Visit id | Visits | Random UUIDv7, not derived from the visitor, at most one UTC day |
| Time | All reports | To the second |
| Event name, properties | Events | ≤ 30 properties, typed, length-limited, PII scrubbed |
| Revenue, currency | Revenue | As sent |
| Engaged time, scroll depth | Engagement | Time capped at 4 h, scroll in 10% bands |
| Web Vital name and value | Performance | Sampled |
| Click selector | Click maps | Short CSS selector, generated ids removed |
Held briefly in memory only#
| Data | Purpose | Lifetime |
|---|---|---|
| IP address | Bot checks, visit key | The request (milliseconds) |
| Raw User-Agent | Parsing, bot checks, visit key | The request |
| Daily salt | Visit key | Until the end of the UTC day plus 30 minutes, never persisted |
| Visit key (HMAC) | Continue a visit | 30 minutes of inactivity, never past midnight UTC, memory only |
Aggregates#
| Data | Purpose | Retention |
|---|---|---|
| Filtered hit counts (bots, traffic rules, redactions) by reason and country | Show what was filtered | 13 months |
No IP address is stored for bots or blocked hits.
Retention#
Event data is kept for your plan's retention (6 months on Free, for as long as you subscribe on paid plans, custom per site on Business), then deleted automatically. You can delete data for a date range, a site or your whole workspace at any time. See Cancellation for what happens when you leave.