A starting text for the privacy page of a site measured by Loghound. Adapt it: read it against your actual configuration before you publish it, and fill in every bracket.
Server logs and analytics
We analyse our own web server logs to understand how this site is used and to detect automated abuse. We use self-hosted software for this, and the records are stored in a search index hosted for us by Opensolr, which processes them on our behalf. We do not sell this data.
What we record. For each request: the address, the date and time, the page requested, the status and size, the browser’s User-Agent string, the referring page, and a small number of standard request headers.
A small script on our pages measures how long a page was actually visible and whether it was being interacted with, so that we can tell real reading time from a tab left open in the background. It also runs technical checks that help us identify automated traffic. It sets no cookies and stores nothing on your device. It does not record what you type, what you click on, your mouse movements, or the contents of any page.
Signed-in visitors. [Only if your site sends it: when you are signed in, the script receives your email address so we can tell signed-in visits apart.]
Addresses. [Choose: we store them in full and use them to identify and block abuse / we shorten them before storing so they identify a network rather than a device / we do not store them; they are replaced with an irreversible code that changes daily.]
How long we keep it. [N] days, after which it is automatically deleted. We keep anonymous daily totals for longer.
Lookups. [Choose: addresses are looked up to find the approximate country and network operator / addresses are not sent to any lookup service.]
Your rights. You can ask what we hold about you and ask us to delete it. If we do not store addresses in an identifiable form, we may not be able to find records relating to you.
- Addresses: match your choice in Settings › Privacy. How addresses are stored.
- How long: the age rule in the same card, and keep in mind the disk rule can delete sooner. Retention & disk.
- Lookups: the location, network, whois and reverse DNS switches. What leaves the machine.
- If you switch to hashed addresses, say so: it is a real commitment and worth the credit.
Privacy & retention
- What leaves the machine
- How addresses are stored
- GDPR
- Text for your visitors
- Retention & disk