Privacy Policy
The short version: PageLens is a website analytics service. We don't use cookies on the websites we measure, we don't store visitors' IP addresses, and we never sell data or use it for advertising. For the people who sign up to use PageLens, we keep only what we need to run your account.
This policy explains what information PageLens ("PageLens", "we", "us") collects, why, and what choices you have. It covers two groups of people:
- Customers — people who create a PageLens account and use the dashboard at
app.pagelens.io. - Visitors — people who browse a website that has installed the PageLens tracking script.
1. Visitors of websites that use PageLens
When a website owner adds the PageLens script, we process limited, non-identifying information about visits on their behalf. For this data the website owner is the controller and PageLens acts as a processor.
What we collect
| Data | Purpose | Stored? |
|---|---|---|
| Page URL path, page title, hostname | Which pages are viewed | Yes |
| Referring website and UTM campaign parameters | Where traffic comes from | Yes |
| Browser, operating system and device type (derived from the user agent) | Device statistics | Yes, as categories only |
| Country and city (derived from the IP address) | Location statistics | Yes, country and city only |
| Screen size and browser language | Device and language statistics | Yes |
| Custom events sent by the website (e.g. "signup") | Goals and funnels | Yes |
| JavaScript error messages and Web Vitals timings | Site health reports | Yes |
| IP address | Location lookup and daily visitor hash | No — discarded after processing |
| Full user agent string | Device lookup and daily visitor hash | No |
How visitors are counted without cookies
PageLens does not set cookies or use local storage, fingerprinting or any other identifier stored on the visitor's device. To count unique visitors, we combine the IP address, user agent, website ID and a random salt into a one-way hash. The salt is replaced every 24 hours and the old one is deleted, so the same person cannot be recognised from one day to the next or across different websites. The IP address itself is never written to our database.
What we don't do
- We don't build profiles of individual visitors or track them across websites.
- We don't sell, rent or share visitor data with advertisers or data brokers.
- We don't collect names, email addresses or form contents from visitors (unless a website owner deliberately sends such data in a custom event, which our terms prohibit).
Requests from known bots and crawlers are discarded without being stored.
2. PageLens customers
Account information
- Email and password sign-up: your name, email address and a securely hashed password (we never store your password in plain text).
- Sign in with Google or GitHub: your name, email address and profile picture as provided by that service. We request only basic profile and email access and do not access any other data in your Google or GitHub account.
- Sessions: when you sign in we store a session record with your IP address and browser user agent to keep you signed in and to help detect suspicious activity.
- Your configuration: the websites you add, goals, funnels, and the email addresses of teammates you invite.
- Billing: if you subscribe to a paid plan, payment is handled by Paddle (see below). We receive and store only your subscription status, plan, billing period and Paddle customer and subscription IDs — never your card details.
How we use it
We use account information only to provide and secure the service: to sign you in, show you your dashboards, let you collaborate with teammates, and contact you about your account or important changes to PageLens. We don't use your data for advertising.
The PageLens website
Our own marketing site, pagelens.io, is measured with PageLens itself, under the same cookieless approach described above.
3. Service providers
We rely on a small number of providers to run PageLens:
- Railway — application hosting and database.
- Paddle — our reseller and Merchant of Record for paid plans. Paddle processes your payment details, billing address and tax information under its own privacy policy.
- Cloudflare — domain name (DNS) services and forwarding of email sent to our
@pagelens.ioaddresses. - Google and GitHub — optional sign-in, only if you choose to use them.
- Google Fonts, cdnjs and unpkg — fonts and open-source libraries loaded by the PageLens dashboard and website. These providers receive standard request information (such as IP address) when your browser downloads those files. The tracking script installed on customers' websites does not load any third-party resources.
- DuckDuckGo icon service — used by the dashboard to display small favicons of referring websites.
Location data is derived using a GeoLite2 database by MaxMind that runs on our own servers; IP addresses are not sent to MaxMind.
4. Data retention
Analytics data is kept for as long as the website remains in a customer's account. When a customer deletes a website, all of its analytics data is permanently deleted. Account information is kept until the account is deleted. Expired sign-in sessions are removed automatically.
5. Your rights
Depending on where you live (for example under the GDPR or CCPA), you may have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing. Customers can delete websites directly in the dashboard. To exercise any other right, or to delete your account, email us at the address below and we will respond within 30 days.
Because we don't store IP addresses or persistent identifiers for website visitors, we usually cannot link analytics data to a specific person. Visitors with questions about a particular website should contact that website's owner.
6. Security
All traffic to PageLens is encrypted with HTTPS. Passwords are hashed, access to customer data is restricted by account and role, and we keep the amount of data we collect to a minimum.
7. Children
PageLens is a business tool and is not directed at children under 16. We do not knowingly collect personal data from children.
8. Changes to this policy
If we make material changes, we'll update the date at the top of this page and, where appropriate, notify customers by email before the changes take effect.
9. Contact
Questions about privacy or this policy: hello@pagelens.io