Skip to content
Sign inStart free

Privacy policy

Last updated September 29, 2026.

Nocrumbs is website analytics that collects nothing personal about the people who visit our customers' sites. This policy covers two groups: visitors to sites that use Nocrumbs, and people with a Nocrumbs account.

Visitors to sites that use Nocrumbs

When you visit a site that uses Nocrumbs, the site's script sends us the address of the page, the referring page, and your screen width. Our servers also see your IP address and browser user agent, as every web server does. From these we keep only:

  • the page path, without query strings or fragments;
  • the referring site's name, never the full referring address;
  • your country, looked up from the IP address;
  • a device size class, and your browser and operating system with major versions only;
  • a hash made from the site, your IP address, your user agent, and a random value that we replace every day and then destroy.

Your IP address and full user agent are used for that one request and never stored. The daily hash cannot be turned back into an IP address and cannot connect your visits across days. We set no cookies and store nothing in your browser. We do not build profiles, follow you across sites, or sell or share data for advertising.

The site owner decides what else to record with custom events, and our documentation asks them never to include personal details.

Account holders

When you create a Nocrumbs account we keep:

  • your email address, to sign you in and send you codes, reports, and service notices;
  • your passkeys' public keys, with a label naming the device type;
  • your sign-in sessions, with a device label, while they are active;
  • a security log of sign-ins and account changes, in which IP addresses are replaced by a keyed hash, kept for 25 months;
  • your organizations, sites, and settings;
  • if you pay, your billing details, which are held by our payment provider, Stripe.

Where data is stored

Nocrumbs runs on Amazon Web Services in the United States. We use Amazon for hosting and email delivery and Stripe for payments. They process data only to provide those services to us.

How long we keep it

Analytics data is kept for as long as the site's plan allows, then deleted. Account data is kept while your account exists and deleted when you close it, except the security log, which is kept for its 25 months.

This website

This website sets no cookies and loads nothing from other companies.

Your choices and rights

You can see, correct, export, or delete your account data at any time by writing to privacy@nocrumbs.io. Because we hold no personal data about site visitors, there is nothing to look up or delete for them.

Changes

If we change this policy, we update the date above, and tell account holders by email about any change that matters.