Privacy & analytics

What we collect

• Pages you visit (the path only — never query strings or form contents).
• How you arrived: the referring website's domain and any campaign (UTM) tags.
• Browser family, device type (mobile, tablet, desktop) and country, as reported by our hosting provider.
• Key product actions, such as uploading a statement, exporting a report or creating a release.
• When signed in: sign-ins, sign-outs and a "last seen" time used to show administrators who is online.
• Error messages from the app, without personal data, so we can fix problems.

What we don't collect

• No third-party advertising or tracking scripts, and no device fingerprinting.
• No IP addresses are stored with analytics. Location is limited to country.
• No passwords, tokens, payment details, uploaded file contents or private messages.

Identifiers and retention

A random visitor id is stored in a first-party cookie (cl_vid, 1 year) so repeat visits are not counted as new visitors, and a session cookie (cl_sid) groups page views into visits. Analytics events are deleted after about 13 months and the account activity log after 24 months.

Your choices

You can turn off usage analytics for your browser under Settings → Privacy. If your browser sends a Do Not Track signal, usage analytics are not collected. Security records (sign-in attempts) and online status are kept for signed-in accounts to protect them.

Only Creator Lab administrators can view analytics and activity logs.