Privacy at Beaacon

The waitlist and feedback forms

Joining the waitlist saves the email address you provide and the date you joined. We use it only for Beaacon launch updates. This is separate from visitor analytics and does not create an account.

The feedback form saves your email, message, and submission date so we can handle questions and requests. Sending feedback does not subscribe you to the waitlist. These records are stored in Beaacon’s database and are only available to administrators; they are never displayed publicly or sold.

To request removal from the waitlist or deletion of a message, use the feedback form. Requests are reviewed manually. Please do not include sensitive information in your message.

The public forms use an essential security cookie to prevent forged submissions. Signing in also uses an authentication cookie. The cookie-free analytics description below refers to the collector installed on measured websites.

What the analytics collector records

The Beaacon analytics collector counts visits. The collector stores no cookies, collects no personal data, and does not follow you between websites or between days. No cookie banner is needed for it.

What is recorded

• The page address, without the query string.
• The time of the visit.
• The name of the website that linked here, if any — not the page, and not its address.
• Campaign tags, when a link carries them.
• The country, worked out from your address and then thrown away.
• Your browser and operating system, major version only.
• Whether you are on a desktop, a tablet or a phone, and the window width.
• How long the page was visible.
• How quickly the page drew, responded to a click and settled — timings your browser had already taken about the page itself, not about you. Two of them are sent twice: once for the whole visit, and once for the page you are on.

What is never recorded

• Your IP address. It is used in memory to work out the country and then discarded. It never reaches a database, a log or a file.
• Your full browser identification string. It is reduced to a browser and operating system name, then dropped.
• Query strings. Only the five utm_ campaign keys survive. Everything else — search terms, tokens, email addresses — is discarded before anything is written.
• The address of the page that linked here. Only the website name is kept. The rest belongs to another site and carries the same tokens and email addresses yours would, so it is discarded before anything is written.
• Cookies, local storage, session storage. Beaacon writes nothing at all to your device.
• Your name, email, or anything you type. The analytics collector does not read form fields. Information you explicitly submit to Beaacon’s waitlist or feedback forms is handled separately, as described on the general privacy page.
• Any identifier that lasts. See below.

How visits are counted without an identifier

To group one person's pageviews into a single visit, Beaacon makes a one-way hash of your address, your browser string and the site, mixed with a random value that is regenerated every 24 hours and never written down. When that value is replaced, the previous day's hashes cannot be linked to the new ones by anyone, including whoever runs this server.

The site identifier is part of the hash, so the same person visiting two different sites produces two unrelated values. Following someone between sites is not possible even in principle.

Why there is no cookie banner

Consent banners exist because of rules on storing or reading information on your device, and because of processing personal data. Beaacon does neither. It writes nothing to your device, and the only thing resembling an identifier is destroyed every 24 hours, which is what stops it identifying anyone.

How long it is kept

Records are deleted automatically after the retention period set for each site, which is two years by default.

Your rights

The analytics records do not identify an individual, so there is no named visitor record to retrieve or erase. This does not apply to information you explicitly submit through the waitlist or feedback forms: use the feedback form to request its deletion.

Beaacon is self-hosted. No analytics vendor, advertising network or tag manager is involved, and no visitor data is sent to a third party.