Privacy Policy

Last updated: February 11, 2026

Agent Analytics ("we", "us", "our") operates the website agentanalytics.sh and the hosted platform at app.agentanalytics.sh. This Privacy Policy explains what information we collect, how we use it, and your rights.

1. Information We Collect

Account information: When you sign up via GitHub or Google OAuth, we receive your email address, display name, and avatar URL from the provider. We do not receive or store your password.

Analytics data you send us: When you use our tracking API, you send us event data (event names, properties, timestamps, optional user/session IDs). This is your data — we store it on your behalf as a data processor.

Usage data: We track API call counts and event volumes per project for rate limiting and billing purposes.

2. How We Use Your Information

To provide and maintain the Agent Analytics service
To authenticate you and manage your account
To enforce rate limits and usage quotas
To process payments and manage your subscription
To communicate with you about your account (if necessary)

We do not sell your personal information. We do not use your analytics data for advertising or profiling.

3. What Our Tracker Does NOT Collect

The Agent Analytics tracking script (tracker.js) is designed to be privacy-friendly by default:

No cookies — the tracker uses localStorage for an anonymous visitor ID and sessionStorage for session tracking. No cookies are set.
No IP addresses — we do not collect or store visitor IP addresses.
No fingerprinting — we do not use browser fingerprinting techniques.
No cross-site tracking — each project's data is completely isolated.
No personal data — the tracker collects page URL, referrer, screen size, browser name, OS, device type, and language. None of this constitutes personal data under GDPR.

Because our tracker does not use cookies or collect personal data, websites using Agent Analytics generally do not need a cookie consent banner for the analytics tracker. This is the same approach taken by other privacy-first analytics platforms.

4. Data Storage

Your data is stored on Cloudflare's global network using Cloudflare D1 (SQLite at the edge) and Cloudflare KV. Each account's analytics data is stored in an isolated database. Data is encrypted in transit (TLS) and at rest.

5. Third-Party Services

We use the following third-party services:

Cloudflare — hosting, database, CDN, and edge compute (privacy policy)
Lemon Squeezy (Lemonsqueezy Inc.) — payment processing and subscription management (privacy policy)
GitHub (Microsoft) — OAuth authentication; we only request email and profile scope (privacy policy)
Google — OAuth authentication; we only request email and profile scope (privacy policy)

These services act as subprocessors when handling data on our behalf. A full list of subprocessors is included in our Data Processing Agreement.

We do not share your data with any other third parties.

6. Data Retention

Account data is retained as long as your account is active. Analytics event data retention depends on your plan tier (7 days on free, 12 months on paid plans). You can delete your account and all associated data through the dashboard or by contacting us.

7. Your Rights

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your account and data
Export your analytics data via our API
Object to or restrict processing of your data
Withdraw consent at any time (where consent is the legal basis)

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. GDPR (European Economic Area)

If you are located in the European Economic Area (EEA), the following applies:

Roles: When you use Agent Analytics to collect analytics data from your website visitors, you are the data controller and Agent Analytics is the data processor. We process analytics data on your behalf and only according to your instructions.

Legal basis for processing:

Account data: Contractual necessity (Article 6(1)(b)) — we need your email and name to provide the service.
Analytics data: Legitimate interest (Article 6(1)(f)) — you have a legitimate interest in understanding how your website is used. Because our tracker collects no personal data, cookie consent is generally not required.
Payment data: Contractual necessity (Article 6(1)(b)) — processed by Lemon Squeezy to fulfill your subscription.

Data Processing Agreement: Our Data Processing Agreement (DPA) governs how we process data on your behalf in compliance with GDPR Article 28. The DPA is automatically incorporated into your use of the service.

International transfers: Your data is processed on Cloudflare's global edge network. Cloudflare maintains appropriate safeguards for international data transfers.

9. CCPA (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you additional rights:

Right to know: You can request what personal information we collect, use, and disclose.
Right to delete: You can request deletion of your personal information.
Right to opt-out: We do not sell personal information, so there is no sale to opt out of.
Non-discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise these rights, contact us at [email protected].

10. Cookies

We use a single session cookie (aa_session) for authentication on the dashboard. It is HttpOnly, Secure, and expires after 7 days. This is a strictly necessary cookie required for the service to function and is exempt from consent requirements under GDPR and the ePrivacy Directive.

We do not use tracking cookies, advertising cookies, or third-party cookies anywhere on our platform.

11. Children's Privacy

Agent Analytics is not intended for use by anyone under the age of 16. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page.

13. Contact

If you have questions about this Privacy Policy, contact us at [email protected].

Agent Analytics · Terms of Service · DPA