Bot AnalyticsBack to site

Privacy policy

Last updated 1 August 2026

This page is maintained by the Bot Analytics team to explain what our tracking script collects, how we use it, and how long we keep it. It describes our current practices and is not an independent certification or legal advice.

Who we are

Bot Analytics provides bot analytics, bot protection and AI visibility reporting for website owners ("customers"). When a customer installs our script on their website, we act as a data processor on their behalf.

What the script collects

  • The user agent string of the request
  • The requested path and the referring URL
  • An anonymous session identifier stored in memory for the length of the page visit
  • Time spent on the page
  • Country, derived at the edge from the request
  • A truncated, irreversible hash of the IP address, used only to group requests

What it does not collect

  • No cookies are set and no local storage is written
  • No raw IP addresses are stored
  • No names, email addresses, form contents or other personal details
  • No cross-site tracking and no advertising identifiers

Form protection

Where a customer enables form protection, we issue a short-lived signed token to the page and verify it when the form is submitted. We record only whether a submission passed or failed verification, the reason, and the user agent. Form field values never leave the customer's own website.

Account data

For customers we store an email address, optional name, company and phone number, the plan in use, and the websites registered to the account. This data is used to operate the service, bill for it, and provide support.

Retention

Raw visit and form-event records are retained according to the plan in use (30 days on Free, 180 days on Basic, 365 days on Pro) and are deleted afterwards. Account data is kept for as long as the account exists.

Subprocessors

  • Our hosting and database provider, for application hosting and data storage
  • Our AI provider, used to generate page-audit summaries from public page content only

Your rights

Customers can export or delete their data at any time, and can request access, correction or erasure by contacting us. Visitors to a customer website should direct requests to that website's operator, who is the controller of the data.

Contact

Privacy and security questions: privacy@botanalytics.io