Privacy and your data
PageHum counts and discards. It sets no cookies and sends no identifiers, so there is nothing to tie a visit to a person.
What is kept
- Per site, per UTC day: counts of pageviews, sessions, and visitors; pages, sources, and devices; load and Web Vitals histograms; engaged visits and successes.
- Client error messages (first line, at most 80 characters, no query strings) and broken paths, with counts.
- Visitor country as two letters (like DE), counted per day. Never a city, a region, or the IP it came from.
- The KB pages transfer, and the outside origins they load from (origin only, like https://widget.example.com), with how long and how much, as counts per day.
- Content Security Policy blocks: the directive and the blocked origin or keyword, with counts.
- The days-since-last-visit tally that makes unique visitors possible, as counts per gap, never per browser.
- Homepage check results and incidents.
- For your account: your email, plan, sites, and settings. A LandingBoost key, if you link one, is encrypted (AES-256-GCM) and never shown again.
What is never kept or sent
- Cookies, user IDs, device fingerprints, or any identifier.
- IP addresses. Ingest reads the browser’s Origin header to check where a beacon came from, the browser family and major version from User-Agent for client errors, and the two-letter country the hosting edge reports for pageviews. The IP itself is never read or stored.
- Query strings, fragments, form contents, or what visitors type.
- Individual visits, click paths, session replays, or stack traces.
What the snippet stores in the browser
| Key | Where | Holds | Why |
|---|---|---|---|
pagehum.vday | localStorage | The date of the last visit day | To count a visitor once per day, and the days since the last visit |
pagehum.sid | sessionStorage | A flag | To count a session once per tab |
pagehum.eng | sessionStorage | A flag | To count an engaged visit once per session |
None of them identifies a visitor, and none is sent as an identifier.
How long it is kept
Daily counts are kept 40 days on Free, 90 days on Starter, and 13 months on Pro. Homepage checks are kept 7 days and incidents 40 days. See Plans and limits.
Deleting your data
Delete a site at the bottom of its board: its counts, history, checks, incidents, and alerts go with it. Delete your whole account at the bottom of the account page: every site and everything kept for them goes, in one step.