Sign inBook a setup callStart tracking
Product
How it worksLive demoUTM builder
By what you run
Online storeServices and leadsCreatorsAgencies
Platforms
Meta adsGoogle AdsTikTokInstagramEmailSMS
Resources
DocsWalkthroughsEvents APICompareSecurity
PricingSign in
Start trackingBook a setup call

Account

Data and privacy

What Sporetag records about your visitors, what it never stores, where the data lives, how long it is kept, and how to export or delete it.

This page is about the visitors to the sites you track. For what we do with your own account data, read the privacy policy.

What is recorded for each event

  • The page path and the referrer's host name.
  • UTM tags, and ad click ids if the landing address had them.
  • Country, device type, browser and operating system. These are worked out from the request and the IP address is then dropped.
  • How long the page was visible.
  • A visitor hash, so one person counts once.
  • For a click: the short link it was.

What is never stored

  • The IP address.
  • The full user agent string.
  • Cookies or anything in the browser, in Private mode.
  • Raw phone numbers. Emails and phones you send are kept only as a SHA-256 hash, except that customer profiles keep the email encrypted while Show customer emails is on.

The visitor hash

In Private mode a visitor is sha256(salt, site, IP, user agent). The salt changes every day and the old one is deleted. So nobody, us included, can link a visitor across days or across sites.

In Attribution mode the script also keeps a random first-party id on your domain for 90 days. It is not linked to any other site.

Where it lives

Sporetag runs on Cloudflare. Events are stored in Cloudflare Workers Analytics Engine. Accounts, sites, links and goals are stored in Cloudflare D1. We do not offer EU-only hosting today.

How long it is kept

Your plan sets how far back you can see: 30 days on Free and 2 years on Solo, Studio and Agency. See Billing and limits.

Export

Every list in the dashboard has a CSV export.

Delete

Delete one customer, or forget an email for a data request, on the site's Customers tab. See Customer profiles.

Delete a site in its settings to remove it from your account. To close your account and remove your data, email hello@sporetag.com from the address on the account.

Sending data to Meta

Nothing goes to Meta unless you connect a site to the Meta Conversions API and mark goals to send. Then only those goals' conversions are sent, with hashed contact details.

Something missing or wrong? Email hello@sporetag.com.