Privacy policy
Analytics without spying on people
Onfus is a lightweight website analytics tool. It measures aggregated traffic — how many people visit, which pages they read, and which campaigns work — without identifying anyone.
What we collect
| Page path and page title of a view | What was viewed, without query strings that could hold personal data |
|---|---|
| Referrer and UTM tags | Which campaign or site sent the visit |
| Anonymous visitor and session id | Random ids stored in the browser, so repeat visits can be grouped |
| Timestamp (UTC) | When the hit happened |
| Device class, browser and operating system | Derived from the user-agent header at ingest |
| Country and region | Derived from the network edge at ingest, without storing the IP address |
| Custom event names and properties | Only what the site itself sends, e.g. signup or purchase revenue |
What we never collect
- · IP addresses are never stored — they are used briefly in memory to rate-limit abuse and then dropped.
- · No passwords, form contents, payment details or private messages.
- · No cookies, no cross-site tracking, no fingerprinting, no advertising profiles.
- · No personal identifiers from the sites we measure, unless a site deliberately sends them as an event property — which the site owner controls.
Cookies and local storage
The tracking script sets no cookies. It stores one randomly generated visitor id in the browser's local storage so repeat visits can be recognised, and it groups activity into 30-minute sessions. Clearing site data removes both — the visitor simply looks new again.
Visitors who enable Do Not Track or Global Privacy Control are not measured at all: the script exits before it sends anything.
Data retention and deletion
Each project has a retention window (30, 90, 180 or 365 days, depending on the plan). Analytics older than that window is deleted automatically as new traffic arrives, and the project owner can purge expired data at any time from the project settings.
Deleting a project permanently removes the project, its tracking key and every pageview, session, event, goal and funnel connected to it.
Where data lives and who can see it
Data is stored in this application's own database and is isolated per account: only the project owner (and the platform administrator operating this installation) can read a project's analytics. Raw visitor data is never shared or sold, and is never used for advertising.
Questions or requests
Visitors who want data removed, or site owners with a question about what is measured, should contact the operator of this installation through the contact details published on the site that runs Onfus.
This policy describes the Onfus analytics application itself. The sites that install the tracking script remain responsible for their own privacy notices.