Privacy policy
Last updated
1. Who we are
Measure (measure.events) is run by Turbo Puffin LLC. Questions about this policy go to support@measure.events.
2. Visitors to sites that use Measure
Measure is built so that site owners can count visits without identifying anyone. We set no cookies and use no local storage, fingerprinting scripts or cross-site identifiers.
For each pageview we keep the page path, the referring site's host name (never the full referring URL), campaign tags (utm_*), the country, the device type, browser and operating system family, and whether the request came from a person, a known AI agent or a bot.
We do not store IP addresses or user-agent strings. To estimate unique visitors we compute a one-way hash of a random daily value, the site, a shortened network address and a shortened user agent. The daily value is deleted after two days, after which the hash cannot be recomputed or linked to any other day.
Country comes from a local copy of the DB-IP Lite database (db-ip.com, CC BY 4.0), looked up in memory; the address is then discarded.
3. Measure account holders
We keep your email address, optional name, your sites, API key hashes (never the keys themselves) and your billing status. Sign-in is by a one-time code sent to your email; we store only a hash of each code.
Payments are handled by Stripe, which holds your card details. We receive your subscription status and the last four digits of the card.
We send email through Resend for sign-in codes and account notices only. No marketing email without your consent.
4. Retention and deletion
Analytics are kept while your account is active. Deleting a site deletes its analytics. Deleting your account deletes everything under it at once; encrypted backups age out within 30 days.
5. Processors
Hetzner (hosting, Germany), Stripe (payments), Resend (email). Each processes data only to provide its service to us.
6. Changes
If this policy changes in a way that matters, we will say so on this page and email account holders.