Analytics data inventory

Every field Privatus Analytics stores about visits and events, why it is needed, how it is minimized and how long it is kept, plus what stays in memory only.

# Analytics data inventory

> Every field Privatus Analytics stores about visits and events, why it is needed, how it is minimized and how long it is kept, plus what stays in memory only.

## Stored per event and visit

| Field | Purpose | Minimization |
|---|---|---|
| Hostname and path | Pages report | Query string removed except campaign parameters and your allowlist, PII scrubbed, path masks applied |
| Referrer host and path | Sources | `www.`/`m.` stripped, query string dropped, your own domains blanked |
| UTM source, medium, campaign, content, term, `ref` | Campaigns | Stored as sent (don't put personal data in them), click ids reduced to a yes/no "paid click" flag |
| Channel | Channels | Derived from the above |
| Country | Locations | From the `CF-IPCountry` header Cloudflare adds to each request. No region, city or coordinates |
| Language | Locations | `navigator.language`, max 16 characters |
| Device type, browser + major version, OS + major version | Technology | Parsed from the User-Agent, raw User-Agent dropped |
| Screen size bucket | Technology | `xs` < 414, `sm` < 768, `md` < 1024, `lg` < 1440, `xl` px, exact width dropped |
| Visit id | Visits | Random UUIDv7, not derived from the visitor, at most one UTC day |
| Time | All reports | To the second |
| Event name, properties | Events | ≤ 30 properties, typed, length-limited, PII scrubbed |
| Revenue, currency | Revenue | As sent |
| Engaged time, scroll depth | Engagement | Time capped at 4 h, scroll in 10% bands |
| Interaction (yes, no or unknown) | Telling people from bots that load a page and leave | One flag per visit: whether any mouse, touch, key or wheel input was seen. Nothing about the input itself |
| Web Vital name and value | Performance | Sampled |
| Click selector | Click maps | Short CSS selector, generated ids removed |

## Held briefly in memory only

| Data | Purpose | Lifetime |
|---|---|---|
| IP address | Bot checks, visit key | The request (milliseconds) |
| Raw User-Agent | Parsing, bot checks, visit key | The request |
| Daily salt | Visit key | Until the end of the UTC day plus 30 minutes, never persisted |
| Visit key (HMAC) | Continue a visit | 30 minutes of inactivity, never past midnight UTC, memory only |

## Aggregates

| Data | Purpose | Retention |
|---|---|---|
| Filtered hit counts (bots, traffic rules, redactions) by reason and country | Show what was filtered | 13 months |

No IP address is stored for bots or blocked hits.

## Retention

Event data is kept for your plan's retention (6 months on Free, for as
long as you subscribe on paid plans, custom per site on Business), then
deleted automatically. You can delete data for a date range, a site or
your whole workspace at any time. See
[Cancellation](/docs/billing/cancellation) for what happens when you
leave.

查看 Markdown

Stored per event and visit#

Field	Purpose	Minimization
Hostname and path	Pages report	Query string removed except campaign parameters and your allowlist, PII scrubbed, path masks applied
Referrer host and path	Sources	`www.`/`m.` stripped, query string dropped, your own domains blanked
UTM source, medium, campaign, content, term, `ref`	Campaigns	Stored as sent (don't put personal data in them), click ids reduced to a yes/no "paid click" flag
Channel	Channels	Derived from the above
Country	Locations	From the `CF-IPCountry` header Cloudflare adds to each request. No region, city or coordinates
Language	Locations	`navigator.language`, max 16 characters
Device type, browser + major version, OS + major version	Technology	Parsed from the User-Agent, raw User-Agent dropped
Screen size bucket	Technology	`xs` < 414, `sm` < 768, `md` < 1024, `lg` < 1440, `xl` px, exact width dropped
Visit id	Visits	Random UUIDv7, not derived from the visitor, at most one UTC day
Time	All reports	To the second
Event name, properties	Events	≤ 30 properties, typed, length-limited, PII scrubbed
Revenue, currency	Revenue	As sent
Engaged time, scroll depth	Engagement	Time capped at 4 h, scroll in 10% bands
Interaction (yes, no or unknown)	Telling people from bots that load a page and leave	One flag per visit: whether any mouse, touch, key or wheel input was seen. Nothing about the input itself
Web Vital name and value	Performance	Sampled
Click selector	Click maps	Short CSS selector, generated ids removed

Held briefly in memory only#

Data	Purpose	Lifetime
IP address	Bot checks, visit key	The request (milliseconds)
Raw User-Agent	Parsing, bot checks, visit key	The request
Daily salt	Visit key	Until the end of the UTC day plus 30 minutes, never persisted
Visit key (HMAC)	Continue a visit	30 minutes of inactivity, never past midnight UTC, memory only

Aggregates#

Data	Purpose	Retention
Filtered hit counts (bots, traffic rules, redactions) by reason and country	Show what was filtered	13 months

No IP address is stored for bots or blocked hits.

Retention#

Event data is kept for your plan's retention (6 months on Free, for as long as you subscribe on paid plans, custom per site on Business), then deleted automatically. You can delete data for a date range, a site or your whole workspace at any time. See Cancellation for what happens when you leave.