Privacy policy

Visitors to websites using Onfus

The Onfus script does not use cookies, localStorage identifiers or any other persistent storage on your device, and does not track you across sites. For each page view or custom event we record:

• Page URL and referrer (query strings are dropped except UTM tags)
• Browser, operating system and device type, from the User-Agent
• Screen width class (mobile, tablet, desktop)
• Country, region, city, approximate city-level coordinates and timezone, derived from the IP address
• Event name and any custom properties the site owner chose to send

The IP address and User-Agent are combined with a secret that rotates daily into a one-way hash used to count unique visitors within a single day. The raw IP address is never stored. The hash cannot be reversed and changes every day, so visitors cannot be followed over time.

Because no personal data is stored and no identifiers persist on the device, sites using Onfus generally do not need a cookie banner for it. Site owners remain responsible for their own compliance.

Revenue attribution is an opt-in exception. When a site owner connects Stripe and turns it on, the script sets one first-party cookie, onfus_visitor, holding a random id for up to a year. The site passes that id to its own Stripe checkout. Onfus then imports that site's payments (amount, currency, time, Stripe customer id and email) and links each one to the visit that led to it. Because the id persists, visits from the same browser on that site are also linked over time (first visit, days visited and revenue). The site owner is the controller of that data and is responsible for any consent it requires.

Onfus customers

When you create an account we store:

• Email address, and name and avatar if you sign in with Google
• The websites you add and their analytics data
• Workspace members and invitations you create
• Billing details, handled by Stripe. We store a Stripe customer id and subscription status, never card numbers.

We use this data to run the service, email you about your account (sign-in codes, trial and billing notices, optional reports) and provide support. We do not sell data or use it for advertising.

Sign in with Google

If you choose "Continue with Google", Google sends us your name, email address and profile picture. We use them only to create and sign you into your Onfus account and to show your name and picture in the app. We request no other Google data and never access your Gmail, Drive, Calendar or Contacts. Google user data is not used for advertising, not sold, and shared only with the sub-processors below acting on our behalf. You can revoke Onfus's access at any time at myaccount.google.com/permissions and delete your account by emailing hello@onfus.com. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Retention

Analytics data is kept until you delete it, or for the retention period you choose in each site's settings. When a trial or subscription ends we stop collecting new visits, but the data already in your account stays, within each site's retention period, so you can come back. You can delete a site at any time from its settings, and your whole account by emailing hello@onfus.com; deletion is permanent.

Sub-processors

• Vercel (hosting, USA/EU)
• Supabase (database and authentication, USA)
• Stripe (payments)
• Resend (transactional email)
• Migadu (support email, Switzerland)
• Google (optional sign-in)

Your rights

You can access, correct, export or delete your account data by emailing hello@onfus.com. Visitors to sites using Onfus should contact the site owner, who controls that data; we process it on their behalf, and a data processing agreement (DPA) is available to customers on request.

Changes

We will post any changes here and update the date above. Material changes will be announced by email to account holders.