# The rules we follow.

> Punchline Analytics measures software behavior in detail and keeps people anonymous. Here's exactly how.

## What we collect, and what we never keep

- **No cookies or local storage.** Nothing is stored on a visitor's device. Next.js and Cloudflare installs add no script to your pages at all. The optional snippet for Squarespace and Wix sets no cookies and stores nothing either.
- **No IP addresses or user agents are stored.** They're used in memory to classify a request and are then discarded. Logs can't contain them either: logging strips them automatically, and tests check it.
- **A daily visitor hash, not an identifier.** To group one visitor's requests within a day, we compute a one-way hash from a random salt, the site, the IP address and the user agent. The salt is replaced every day and the old one deleted, so hashes can't be linked across days or turned back into an IP address.
- **Global Privacy Control is honored.** If a browser sends it, the visit is still counted, but with no visitor hash at all.
- **Only the parts of a URL we need.** Query parameters are removed except campaign tags (utm_*), and email addresses in URLs are replaced.
- **No form contents, search terms or request bodies,** no keystrokes, and no session recordings, ever.
- **Company domains, only if you send them.** If your server sends the domain of a work email someone gave you, we keep the domain (acme.com), never the address, and use it to group that day's visits by company. Personal mail domains are ignored. Company links are deleted after 90 days, like page views.
- **Retention:** individual page-view records are deleted after 90 days. Daily totals are kept.
- **Location:** data is stored in the United States (Oregon). EU hosting is planned.

## We measure ourselves the same way

This site measures itself with Punchline Analytics under the rules above, and uses no other analytics, cookies or third-party scripts. Its fonts are served from this site, not from Google. If you request a reveal, we store what you put in the form so we can reply. See the [privacy policy](https://punchlineanalytics.com/legal/privacy-policy) for details.