Privacy Policy

e-ZeeInternet ("we", "us", "our") provides privacy-first web analytics. This policy explains what data we collect, why, how we use it, and the rights you have. We've been free and privacy-respecting since 2003 — and this page is meant to be read, not buried.

1. Who this policy covers

This policy applies to two groups: (a) account holders who sign up to use e-ZeeInternet on their own websites, and (b) visitors to websites that embed our analytics tracker. We treat both groups with the same privacy-first approach.

2. Data we collect from account holders

When you create an account, we collect:

• Your email address (required for sign-in and account recovery).
• Your name and avatar, if you sign in with Google or Apple (provided by the OAuth provider).
• The list of trackers and websites you create.
• Operational logs (timestamps, IP address of the request) used to keep the service secure and reliable. These are kept for a short retention window and then deleted.

We do not sell, rent, or share your account data with third parties for advertising.

3. Data we collect from website visitors

When the e-ZeeInternet tracker is loaded on a site, by default it runs in cookie-free mode and collects only what is needed to produce aggregate analytics:

• The page URL being viewed and its title.
• The referring URL, if any.
• User-agent information used to derive the browser, OS, and device type.
• Country, derived from the visitor's IP address. The IP itself is processed in memory and is not stored alongside the pageview.
• A short-lived, daily-rotating hash used to identify unique visitors without persistent identifiers. The hash cannot be used to identify a specific person and cannot be linked across days.

We do not use cookies for analytics by default, do not fingerprint visitors, do not build cross-site profiles, and do not sell or share visitor data with third parties.

4. Cookies

The analytics tracker is cookie-free by default. The only cookies we set are first-party cookies on e-zeeinternet.com for account holders, used solely to keep you signed in to your dashboard. We do not use advertising or tracking cookies.

5. Legal basis (GDPR)

For account data, our legal basis is the contract between you and us (Article 6(1)(b) GDPR) and our legitimate interest in securing the service (Article 6(1)(f)). For analytics data collected on customer sites, the website owner is the data controller; we act as a data processor on their behalf. Because the tracker is cookie-free and does not collect personal data, most jurisdictions do not require a cookie consent banner for analytics — but website owners are responsible for their own local compliance.

6. How we use data

• To provide the analytics dashboard and tracker service.
• To authenticate you and protect your account.
• To prevent abuse, fraud, and denial-of-service attacks.
• To respond to support requests you send us.
• To comply with legal obligations.

We do not use your data — or the data of your site's visitors — to train AI models, build advertising profiles, or for any purpose unrelated to running the service.

7. Data sharing and sub-processors

We rely on a small number of trusted infrastructure providers to operate the service: a managed database and authentication backend, edge hosting and CDN, and an email delivery provider for transactional emails (such as sign-in links and account notifications). These providers process data only on our instructions and under contractual confidentiality and security obligations.

We will only disclose data to authorities when legally required, and we will push back on overbroad requests where we can.

8. Data retention

Aggregated analytics (pageviews, sessions, top pages, etc.) are retained for as long as your account is active so you can see historical trends. Operational logs are retained for a short window (typically 30 days) for security and debugging. When you delete a tracker or your account, the associated analytics data is permanently deleted, normally within 30 days.

9. International transfers

Our infrastructure providers may process data in regions outside your country of residence. Where data is transferred outside the EU/EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

10. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete the personal data we hold about you, to object to or restrict certain processing, and to lodge a complaint with your local data protection authority. You can exercise most of these rights directly from your dashboard, or by contacting us — see the contact section below.

11. Security

We use TLS in transit, encryption at rest, scoped access tokens, and row-level security on our database. We follow the principle of least privilege internally and review access regularly. No system is perfectly secure, but we work hard to make ours boring in the best possible way.

12. Children

The service is not directed at children under 16, and we do not knowingly collect personal data from them.

13. Changes to this policy

We may update this policy as the service evolves. When we make material changes, we'll update the "Last updated" date and, for significant changes, notify account holders by email.

14. Contact

Questions, requests, or concerns about privacy? Reach us via our contact page. You can also review our GDPR notice and Terms of Service.