Privacy

• No cookies. No localStorage. No fingerprinting beyond browser/OS/device class.
• No IP addresses stored — IPs are hashed within the request lifecycle and discarded.
• Visitor identity is a daily-rotating salted hash. The hash cannot be linked across days.
• No third-party trackers. No Google. No Meta. No CDN-served scripts beyond the tracker hosted on insights.webfacemedia.com.
• GDPR / PIPEDA: because no PII is stored and no cross-site identifier exists, the data is generally classifiable as non-personal. The site owner is the data controller; webfaCeMEdia is the processor.
• Data retention: raw events 90 days; daily rollups indefinite; reports indefinite. Configurable per site.