Altias/Privacy Policy

We collect
6 data points.

Here's exactly what they are, why we need each one, and what we'll never touch. No surprises. No buried clauses.

Collected:1Page URL2Referrer3Country4Visitor hash5Session hash6Timestamp

The short version

No tracking cookies, ever.
No raw IP addresses stored.
Only aggregate analytics data.
Never sold or shared.
No consent banner needed.
Delete everything, anytime.

Data manifest

What we collect

6
Page URL/blog/my-postTo show which pages receive the most traffic.
Referrer URLhttps://twitter.comTo show where your traffic comes from.
CountryRODerived server-side from your IP. The raw IP is never stored.
Visitor hashSHA-256(ip·ua·date·site)Resets daily. Used for bounce rate. Cannot be reversed.
Session hashSHA-256(ip·ua·site)Stable per device. Counts unique visitors. Cannot be reversed.
Timestamp2026-04-05 14:32 UTCTo build the pageview trend chart in your dashboard.

On IP addresses: Used in-memory to derive country and compute the two hashes. Never written to our database or server logs.

Account & session data: When you log in to the Altias dashboard, a strictly-necessary session cookie is set to keep you authenticated. This cookie contains no tracking data and is never used for advertising or analytics. It expires when you sign out or after 7 days of inactivity.
Payment data: Billing is handled entirely by Stripe. Altias never sees or stores your card details. When you subscribe, Stripe collects and processes your payment information under their own Privacy Policy. We receive only a customer ID and subscription status from Stripe.

Never. Not once.

What we'll never know about you.

Your IP address
Cookies of any kind
Your name or email
Device fingerprints
Screen size or hardware
Mouse movements or clicks
Cross-site tracking
Advertising identifiers
Browser storage data
Social media profiles

Purpose

How we use the data

It powers your dashboard.
That's all.

Data collected through the Altias snippet is used exclusively to populate the analytics dashboard for the website owner who placed the snippet. It is used for no other purpose.

Specifically: unique visitor counts, total pageviews, bounce rate, top pages, top referrers, geographic breakdown by country, and a daily pageview trend chart.

We do not sell, rent, share, or transfer any data to third parties — including advertisers, data brokers, or analytics aggregators. We do not profile visitors or serve targeted advertising.

GDPR Art. 6 basis: Legitimate interest (Art. 6(1)(f)). Because no personal data is collected, the impact on data subjects is negligible and no consent is required for the tracking script itself.

How long we keep it

Data retention

1

Active site

Pageview records are retained indefinitely so you can view historical trends. Records are linked to a site ID — never to a person.

2

You delete a site

All pageview records for that site are permanently removed from our database immediately.

Instant, no grace period
3

You delete your account

All sites and their associated records are deleted with your account. No backup retains your data after deletion.

Everything, permanently

GDPR & CCPA

Your rights

As an Altias account holder, these rights apply to the personal data we hold about you: email, hashed password, and site list.

Right of access

Request a copy of all personal data we hold about your Altias account.

Right to erasure

Delete your account at any time from dashboard settings. All associated data removed immediately.

Right to rectification

Update your account details (email) from your account settings at any time.

Right to object

Object to processing by deleting your account or contacting us directly.

Right to portability

Contact us for a CSV export of your site analytics data.

Visitors to tracked sites: Because tracking uses irreversible hashes and we never store personal identifiers, there is no personal data to exercise rights over. This is by design.

Questions?

About this policy, exercising your rights, or reporting a privacy concern — reach us directly.

privacy@altias.app

We respond within 72 hours.