Privacy Policy

LightMetrica is a web analytics service. This policy explains what data we collect, why, and how long we keep it. We wrote it to describe what the service actually does — nothing more.

1. Who we are

LightMetrica (lightmetrica.com) is operated by its developer. For any privacy question or request, contact smartscan.tools@gmail.com.

2. Two kinds of data

• Your account data — when you sign up and use the dashboard. For this data we are the controller.
• Analytics data about visitors of your websites — collected by our tracking script on the sites where you install it. We process this data on your behalf: you decide to install the script, and you are responsible for informing your visitors as your local law requires.

3. Account data

• email address;
• password — stored only as a salted scrypt hash, we cannot read it;
• a session cookie lm_session while you are signed in (valid for 60 days);
• the sites you add and their settings;
• weekly reports generated for your sites.

4. Analytics data about website visitors

The tracking script does not use cookies and does not write to the browser's storage (except an optional flag a site owner sets to exclude their own visits). For each pageview it sends: the page address, the referring address, screen width, the browser's time zone and language, the page title, and how long the page was visible and how far it was scrolled. It also reports clicks on phone, email and messenger links, file downloads, outbound links, and custom goals set up by the site owner.

On our side we keep only:

• the page path — without query parameters or fragments (UTM tags are extracted into separate fields);
• the domain of the referring site — not its full address;
• the page title, how long the page was visible and how far it was scrolled;
• browser family, operating system and device type — derived from the User-Agent, which itself is not stored;
• screen-width group, browser language, and an approximate country derived from the time zone (we do not use IP geolocation);
• goal names and the parameters the site owner attaches to them.

We do not store IP addresses. To count unique visitors, we compute a hash of a random daily salt, the site, the IP address and the User-Agent, and keep only the first 20 characters of that hash. The salt changes every day and is deleted after two days, so a visitor cannot be recognized across days or across different websites, and the hash cannot be traced back to an IP address.

Site owners must not send personal data (such as names, emails or phone numbers) in goal parameters.

5. Why we process data

• to provide the service you signed up for: collecting statistics, showing reports, generating weekly summaries;
• to keep the service secure and to prevent abuse.

We do not sell data, do not use it for advertising and do not build profiles of people.

6. AI summaries

Weekly summaries are written with the help of OpenAI. Only the week's aggregated figures are sent to it — totals and changes by source, page and goal. No data about individual visitors is ever sent.

7. Service providers

• Hosting — our servers are rented from the hosting provider Eurohoster;
• OpenAI — writing the text of weekly summaries (aggregated figures only);
• Yandex Metrica API — only if you choose to import your history. Your OAuth token is used once for that import and is not stored.

8. Server logs

Our web server keeps standard access logs for requests to lightmetrica.com itself (the website and the dashboard), including IP address and browser, for security and troubleshooting. They are deleted after 14 days. Requests from the tracking script on your websites are not written to these logs.

9. How long we keep data

• analytics data — while the counter exists; deleting a counter immediately deletes all of its data;
• account data — until you ask us to delete your account;
• daily salts — two days; server logs — 14 days.

We may introduce an automatic retention limit for analytics data; this policy will be updated if we do.

10. Your rights

You can delete any counter and its data in the dashboard at any time. To access, correct, export or delete your account data, email smartscan.tools@gmail.com — we will reply within 30 days. Visitors of websites that use LightMetrica should contact the owner of that website first; we will help the owner fulfil the request.

11. Security

All traffic uses HTTPS. Passwords are hashed, session cookies are httpOnly, and access to reports is limited to the account owner unless the owner enables a public link.

12. Changes

If we change this policy, we will update the date below and, for significant changes, notify account holders.