Privacy policy

Who we are

Beacon is a website analytics service run by AI System Craft (“we”). This policy covers two kinds of people: our customers, who sign up and add their websites, and the visitors to those websites, whose visits Beacon counts.

Visitors to our customers' websites

When someone visits a website that uses Beacon, the Beacon script sends us:

• the address of the page (path and campaign tags only; other query strings are dropped),
• the site that linked to it (its host name only, never the full address),
• the page title, the screen width (as a size band), and how long the page was visible,
• events the website chooses to report, such as “signup”.

Our server adds the browser, operating system and device type (from the browser's user agent), the browser language, and the approximate country, region and city (from the network, supplied by our hosting provider).

What we never do: we set no cookies and store nothing in the visitor's browser. The IP address is used once, together with the user agent and a secret that changes every day, to make an anonymous visitor code; the IP address itself is not stored, and the daily secret is deleted after two days, so a visitor cannot be recognised from one day to the next. We don't build profiles, follow people across websites, or sell or share data for advertising. Browsers that send Do Not Track or Global Privacy Control are not counted.

Our customers

When you sign up we keep your name, email address, a secure hash of your password (never the password itself), your company name if you give one, the websites you add and their settings, and records of your plan and payments. Sign-in uses a cookie that is strictly necessary to keep you signed in.

How long we keep data

• Page views and events: about 13 months, then deleted automatically.
• When you delete a website, its page views, events and goals are deleted at once.
• Account data: for as long as your account exists. Ask us to close it and we delete it.
• Backups are kept for 14 days, then overwritten.

Who processes data for us

We run Beacon on servers we rent from a hosting provider in the European Union, behind Cloudflare, which protects the service and supplies the approximate location. We don't use any other third party to process visitor data.

Your rights

Customers can see, export (CSV) and delete their data from the dashboard, or ask us to do it. Because we don't store anything that identifies a website visitor, we can't single out one visitor's data; if you're a visitor with a question, contact the website you visited, or us.

Changes and contact

If we change this policy we'll update the date above, and tell customers by email about anything important. Questions? Reach us through aisystemcraft.com.