Privacy policy

The short version

clicks.page is privacy-friendly web analytics. We don't use cookies, we don't track people across websites, we never sell data, and we don't store visitors' IP addresses.

Visitors to websites that use clicks.page

When you visit a website that uses clicks.page, we record:

• the page address (without anything after the ? for outbound links), the referring site, and campaign tags (utm_source and similar),
• your country, region and city, worked out from your IP address. The IP address itself is not stored,
• your browser, operating system and device type, from your browser's user agent,
• an anonymous visitor ID: a one-way hash of the site, your IP address and user agent, mixed with a secret that changes every day. It can't be reversed and can't follow you from one day to the next or across websites,
• clicks on links to other sites, and events the website owner chooses to track (such as "signup").

We don't set cookies or use local storage to identify you, and we honour opt-outs set with localStorage.clicks_ignore. Automated traffic (bots) is filtered out.

People who use clicks.page (website owners)

• Account: your email address and a securely hashed password, or your name, email and Google account ID if you sign in with Google.
• Stripe (optional): if you connect Stripe, we record payment amounts, currencies, dates and Stripe customer IDs so we can show which traffic brought revenue. A read-only Stripe key, if you add one, is stored encrypted.
• Google Search Console (optional): if you connect it, we request read-only access to your Search Console data to show search queries, pages, clicks, impressions and positions on your dashboard. Your Google refresh token is stored encrypted, and you can disconnect at any time from Settings or your Google account.

AI assistants (Claude and other MCP clients)

If you connect clicks.page to Claude or another AI assistant, it signs in with OAuth and can read the analytics of the sites your account can see, add a site and create goals. We receive the requests the assistant makes (for example "visitors for example.com in the last 7 days") and return your data. We don't receive or store your conversations with the assistant, and we don't use your data to train AI models. You can disconnect at any time in the assistant's settings or under Account → API keys. See clicks.page for Claude.

Google user data

clicks.page's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google data is only used to show you your own sign-in and Search Console information. It is not sold, not used for advertising, not used to train AI models, and not shared with anyone except as needed to run the service or when required by law.

Who processes data for us

• Cloudflare: hosting, storage and delivery,
• Google: sign-in and Search Console (only if you use them),
• Stripe: only if you connect your Stripe account.

Sharing

Your analytics are private to you and your team unless you choose to make a dashboard public, and you choose exactly which parts are shown. If you connect a partner such as founder.page, only the numbers listed on the approval screen are shared, and you can stop at any time.

Keeping and deleting data

Analytics data is kept for as long as your site is on clicks.page. Deleting a site permanently deletes its data. To delete your account, or to ask what we hold about you, email jr@clicks.page.

Contact

Questions about privacy: jr@clicks.page.