Ce document est publié en anglais, et c’est la version anglaise qui fait foi. Si un point n’est pas clair, écrivez à privacy@analytics.house et nous vous aiderons.
Privacy Notice
In force from 10 November 2026.
1. Who we are
The operator of Analytics House ("we", "us") runs Analytics House at analytics.house and is the controller of the personal data described in section 2. Analytics House is being set up as a UK limited liability partnership; its registered details will be added here once it is registered.
Contact us about privacy at privacy@analytics.house. We have not appointed a data protection officer, because the law does not require one for our activities; the address above reaches the people responsible.
2. Data about our customers and their team members
This section applies if you have an Analytics House account, are invited to a project, or write to us.
| What | Why we use it | Lawful basis (UK GDPR) |
|---|---|---|
| E-mail address, password (stored only as a salted PBKDF2 hash), two-factor secret (encrypted) and recovery codes (hashed) | To create and secure your account and let you sign in | Contract |
| Your plan: Paddle customer and subscription ids, plan, status and invoice totals (never card details) | To give paid plans their features and show your billing status | Contract |
| Projects, team roles, invitations (the invitee’s e-mail address), settings, alert destinations and report preferences | To provide the Service you configure | Contract |
| Service e-mails: password resets, invitations, reports and alerts you turn on. We keep a delivery record (recipient, subject, status); the text of password-reset e-mails is never stored | To run the Service and show what was sent | Contract |
| Security records: counts of failed sign-in attempts, stored only as keyed hashes of the account and IP address; rate-limit counters | To stop password-guessing and abuse | Legitimate interests (keeping accounts and the Service secure) |
| Questions you type into "Ask your analytics" | To answer them. Questions are processed by Cloudflare Workers AI and are not stored by us | Contract |
| Messages you send us, and your e-mail address | To answer you and keep a record of support and requests | Legitimate interests (helping customers); legal obligation for data-protection requests |
We do not send marketing e-mails. If we start, we will ask for your consent first where the law requires it. We do not make decisions about you based solely on automated processing.
Cookies and storage on analytics.house
We do not use advertising or analytics cookies on analytics.house. The dashboard stores:
auth_token: a cookie and browser-storage entry that keeps you signed in for up to 7 days. It is strictly necessary for the service you asked for.theme: your light or dark mode choice, in browser storage.pwa-install-dismissed: remembers, for the current tab only, that you closed the "install app" prompt.- Cached copies of the site's own files (a service worker), so pages load quickly and work offline.
These are exempt from consent because they are needed to provide the service or remember your display choice.
3. Visitors to websites that use Analytics House
When a website uses Analytics House, the website owner is the controller and we process the data only on their instructions, under our Data Processing Addendum. Their privacy notice explains why they measure their website and your rights. Please send requests about this data to the website owner. If you write to us, we will pass your request to them.
For each page view or event, we store:
- the page path without query strings or fragments, and only the domain name of the referring site;
- country, and region and city only if the website owner turns that on (taken from Cloudflare's network, not from GPS);
- browser, operating system and device type (desktop, mobile or tablet), worked out from the user-agent, which is then discarded;
- campaign tags (UTM source, medium, campaign), event names and properties the website sends, and performance timings;
- if the website turns on click maps: how many clicks each part of a page received that day and where inside it they landed. No text, form values or anything that identifies you is recorded, and these counts are not linked to your visit;
- a visitor id and a session id that are one-way hashes of a secret random value for that day, the date, the website, your IP address and your user-agent, shortened to 64 bits. The secret value changes every day and is deleted once that day's statistics are finalised, after which the ids cannot be linked to an IP address, even by us.
We never store your IP address or full user-agent, and we do not set cookies. E-mail addresses, long numbers and tokens that appear in addresses or event properties are removed before storage. The tracker respects Global Privacy Control and Do Not Track: if your browser sends either signal, nothing is recorded. The tracker stores nothing on your device, and website owners can offer you an opt-out.
Because the ids reset every day and are not linked to who you are, we normally cannot find the data that relates to a particular person. Where that is the case, the rights in section 8 to access, correct or delete that data may not apply (UK GDPR Article 11).
4. Who we share data with
We do not sell personal data. We use these service providers (sub-processors), each under a written contract:
| Provider | What they do | Where data is stored |
|---|---|---|
| Cloudflare, Inc. | Hosting, database, network delivery and security, e-mail sending, and AI processing for “Ask your analytics” | Database stored in the European Union. Requests are handled in the Cloudflare data centre nearest the visitor, which may be outside the UK. |
| Zoho Corporation | E-mail hosting for our contact mailbox | Outside the UK (Zoho’s data centres) |
| Paddle.com Market Limited | Reseller and Merchant of Record for paid plans. Paddle collects your name, e-mail, address and payment details at checkout as an independent controller under its own privacy notice; we receive your Paddle customer id, e-mail, plan and payment status. | Paddle’s data centres (UK and US) |
The current list of sub-processors for website visitor data is kept in the DPA. We also send data where you tell us to, for example alerts to your Slack, Discord or webhook address. We may disclose data if the law requires it, or to protect the rights and safety of our users or the Service, and to a successor if the business is transferred, who must then follow this notice.
5. International transfers
Our database is in the European Union, which the UK recognises as giving adequate protection. Where personal data is handled outside the UK and the EU, for example in a Cloudflare data centre or by Zoho, we rely on the safeguards UK law provides: the UK Extension to the EU–US Data Privacy Framework where the provider is certified, or the Information Commissioner's International Data Transfer Addendum to the EU standard contractual clauses. You can ask us for details.
6. How long we keep data
| Data | Kept for |
|---|---|
| Account, project and team data | Until you delete it or your account. Deletion is immediate in the live system |
| Website statistics (aggregated) | The retention period the website owner chooses: 365 days unless they change it |
| Individual page views and events | The same period, or less if the owner shortens it. In “zero raw history” mode, until that day’s statistics are finalised |
| Daily hashing secret | Until that day’s statistics are finalised, normally within a day |
| Password-reset links | 1 hour, and they can be used only once |
| Failed sign-in counters | Up to 2 days |
| E-mail delivery records | 90 days |
| Billing records (plan, status, invoice totals) | Kept for accounting. When you delete your account they are detached from it |
| Messages to our contact mailbox | Up to 2 years after the conversation ends, unless we need them longer for a legal claim |
| Backups | Deleted data can remain in the database’s point-in-time recovery for up to 30 days before it is overwritten |
7. Security
Data is encrypted in transit and at rest, passwords are hashed, two-factor authentication is available, and access to production systems is limited to the people who run the Service. See our security page.
8. Your rights
Under the UK GDPR you have the right to:
- get a copy of your personal data, and have it corrected or deleted;
- restrict or object to our use of it, including where we rely on legitimate interests;
- receive data you gave us in a reusable format (you can also export it from the dashboard);
- withdraw consent at any time, where we rely on consent.
Write to privacy@analytics.house. We will reply within one month. We may ask you to confirm your identity, usually by writing from the e-mail address on your account. You can delete your account yourself at any time in Account settings.
If you are unhappy with how we handle your data, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, telephone 0303 123 1113. If you live in the EU, you can also complain to your local data protection authority.
9. Children
Analytics House is a service for businesses and website owners. Accounts are for people aged 18 or over.
10. Changes to this notice
We will update this notice when our practices change and show the new date at the top. If a change materially affects account holders, we will tell you by e-mail before it takes effect.
Technical detail on how the privacy protections work is in the privacy documentation.