Privacy Policy

1. What We Collect

From website visitors (via embed script): page URL, referrer, device type, browser, OS, language, country (from Vercel/Cloudflare headers), Core Web Vitals (LCP, CLS, INP), and UTM campaign parameters. No cookies. No personal identifiers.

From dashboard users: email address (via Supabase Auth), Stripe customer ID for billing.

2. Visitor Anonymisation

Visitor hashes are computed as SHA-256 of IP plus property plus date plus server salt, then truncated to 16 hex chars. The hash resets daily and differs across properties. Raw IPs are never stored.

3. Data Sharing

We do not sell data. We share data only with: Supabase (database, EU), Stripe (billing), and Vercel (hosting). No third-party analytics, no ad networks.

4. GDPR Compliance

CapraLens is designed to operate without requiring cookie consent. No personal data is collected from website visitors. Dashboard users can request account deletion by contacting support.

5. Data Retention

Event data is purged after 90 days. Account data is retained while the account is active and deleted within 30 days of account closure.

6. Contact

Privacy questions: info@capraworks.com