Privacy policy

Pulse is built to measure websites without creating advertising profiles. We collect the minimum information needed to show website owners aggregate traffic, engagement, conversion, and revenue analytics.

Website analytics

The tracker does not set cookies or write a persistent visitor identifier to localStorage. A random session identifier is held in sessionStorage, expires after 30 minutes of inactivity, and is pseudonymized before storage. Raw IP addresses and full user-agent strings are processed in memory for coarse analytics and are not stored.

Information we store

We store account details, salted password hashes, website settings, page paths without query strings, referrer hostnames, coarse device and country fields when enabled, campaign fields, engagement measurements, custom events, and attributed revenue events. Website owners can disable optional fields per site.

Connected services

If a website owner connects Google Search Console, Pulse stores an encrypted OAuth refresh token and the selected property. Pulse requests read-only access and displays aggregate search performance supplied by Google. The connection can be disconnected and its token revoked from website settings.

Retention and deletion

Each website owner chooses a retention period of 3, 6, 12, or 24 months. Owners can export analytics, erase a site's analytics, delete a website, or delete their account from the settings page.

Your controls

Pulse ignores recognized bots, automated browsers, and browsers sending Global Privacy Control. Strict privacy mode disables persistent customer attribution and optional collection can be turned off independently.

Contact

For privacy or deletion questions, contact the operator of the Pulse installation shown in your account.