Privacy Policy

What we collect

VeryNiceView is a privacy-first analytics tool. We collect the minimum data needed to show useful traffic statistics. All data is stored on our own server — no third parties receive your visitors' data.

• Page URL and path visited
• Referrer hostname (not the full URL)
• Country (derived from Cloudflare, never stored as IP)
• Browser name and version
• Operating system name and version
• Device type (desktop, mobile, tablet)
• Screen and viewport dimensions
• Browser language setting
• UTM campaign parameters
• Time spent on page (visit duration)

How we count unique visitors

To count unique visitors without tracking individuals, we use a daily-rotating hash. When a pageview comes in, we combine the site ID, visitor's IP address, and user agent into a one-way SHA-256 hash with a random salt that changes every day.

• The hash is irreversible — it is impossible to extract the IP or user agent from it
• The salt rotates daily and old salts are deleted after 48 hours, so the same visitor generates a completely different hash the next day
• Our application never stores the raw IP or user agent — they exist only briefly in server memory during hash computation
• We have disabled server access logs for our tracking endpoints so that IP addresses are not logged at the web server level either
• This approach is similar to how other privacy-focused tools like Plausible and Fathom operate

This means we can count how many unique visitors a site gets in a day, but we cannot identify who they are or track them across days.

Infrastructure note: Our site is served through Cloudflare, which necessarily processes IP addresses as part of delivering web traffic. Cloudflare has its own privacy policy. We have no control over Cloudflare's infrastructure-level logging, but within our own application and server, we take every measure to ensure IP addresses are not persisted.

What we do NOT collect

• No IP addresses — used only in memory for hashing, never stored by our application. Server access logs disabled for tracking endpoints
• No cookies — we don't set any cookies on your visitors
• No user agent strings — parsed into browser/OS, used in hash, then discarded
• No fingerprinting — no canvas, WebGL, or device fingerprints
• No local storage — nothing stored in the visitor's browser
• No personal data — no names, emails, or identifiers
• No cross-site tracking — each site's hashes are independent
• No persistent identifiers — daily salt rotation prevents long-term tracking

Do Not Track

We respect the Do Not Track (DNT) browser setting. If a visitor has DNT enabled, no data is collected at all — the tracking script exits immediately and no hash is generated.

Third-party services

Country detection uses the Cloudflare CF-IPCountry header, which is provided by our CDN/proxy layer. No visitor IP addresses are sent to any external geolocation API. Cloudflare processes requests as part of normal web traffic delivery — no additional data sharing occurs for analytics purposes.

Data storage

All analytics data is stored in a local SQLite database on our own server. No data is shared with, sold to, or processed by any third party. Hash salts are automatically deleted after 48 hours. Analytics data is retained indefinitely unless manually deleted.

GDPR compliance

Because we do not store any personal data, set cookies, or use fingerprinting, VeryNiceView does not require a cookie consent banner under GDPR. The daily-rotating hash we use for unique visitor counting is anonymized and non-reversible — it cannot be used to identify or re-identify individual visitors.