Thank you for using Plausible Analytics!
Plausible Analytics is a European company and our data infrastructure is based in Germany and subject to the EU’s strong data privacy laws. Processing and storing data in a secure, fair and transparent way is extremely important to us.
This Data Processing Agreement (“DPA”) is an addendum to the Terms of Service between Plausible Analytics and the customer.
If you are accepting this DPA on behalf of your customer, you warrant that: (a) you have full legal authority to bind your customer to this DPA; (b) you have read and understand this DPA; and (c) you agree, on behalf of your customer, to this DPA.
This DPA applies to visitor data processed by Plausible Analytics on behalf of the customer in connection with the use of the service.
Definitions
-
“You” or “customer” refers to the company or organization that signs up to use Plausible Analytics to analyze website visitors.
-
In the course of providing the Plausible Analytics service to the customer pursuant to the agreement, Plausible Analytics may process visitor data on behalf of the customer.
-
In this Data Processing Agreement (“DPA”), “Data Protection Legislation” means the General Data Protection Regulation (Regulation (EU) 2016/679), and all other applicable laws relating to processing of visitor data and privacy that may exist in any relevant jurisdiction.
-
“data controller”, “data processor”, “data subject”, “personal data” and “processing” shall be interpreted in accordance with applicable Data Protection Legislation.
-
The parties agree that the customer is the data controller and that Plausible Analytics is its data processor in relation to visitor data that is processed in the course of providing the service.
Privacy and security of your visitor data
We take many measures to protect and secure your data through backups, redundancies and encryption. When you use our service to measure your website stats, Plausible Analytics will collect information about your visitors.
You entrust us with your site data and we take that trust to heart. You agree that Plausible Analytics may process your data as described in our data policy and only for that purpose.
You retain full ownership and control of your website data. We obtain no rights from you to your website data. We do not sell your data and only share it with trusted service providers where necessary to operate and provide the service.
Even though the purpose of Plausible Analytics is to measure website usage, this can be done without tracking, collecting or storing personal data that can be used to identify individuals, without using cookies and while respecting the privacy of your website visitors.
By using Plausible Analytics, all site measurement is carried out in an anonymous and privacy-friendly way. We minimize data collection in general. We measure only the most essential data points and nothing else.
We do not attempt to generate a device-persistent identifier. We do not use cookies, browser cache nor local storage. We do not store, retrieve nor extract anything from visitor devices.
Every HTTP request includes the IP address and User-Agent. We generate a daily changing identifier based on these inputs. To anonymize these datapoints and make them impossible to relate back to the user, we run them through a hash function with a rotating salt.
hash(daily_salt + website_domain + ip_address + user_agent)
This generates a random string used to calculate daily unique visitors. The raw IP address and User-Agent are never stored in logs, databases or on disk.