Private because there is nothing to keep.
Tidemark is designed so that individual visitors can’t be followed, profiled or reconstructed. This is how.
| Topic | What Tidemark does |
|---|---|
| Cookies | None. The tracking script and its endpoint set no cookies and use no local storage on your visitors’ devices. |
| IP address | Used in memory to derive a visitor id and, optionally, a country. Never written to the database. |
| User agent | Used in memory to derive a visitor id and browser and device type. The raw string is never stored. |
| Visitor id | A salted hash of site, IP and user agent. The salt changes every day, so a visitor cannot be followed from one day to the next. |
| What is stored | Aggregate-friendly visit rows: pages, referrer, UTM values, country, browser, operating system, device type and any custom events you define. |
| Where | In a database on your own server. Nothing is sent to us or to any third party. The one outbound request is the update check, made every few hours at most (and optional: one setting turns it off), which asks GitHub for the latest version number and sends no site or visitor data. |
How a visit is counted
When a page loads, a small script sends the page, referrer and screen width to your Tidemark install. The server hashes the site, IP address and user agent with a secret and the current UTC date, keeps the first 32 characters of that hash, and discards the inputs. Hits from the same hash within 30 minutes of inactivity extend one visit.
Because the date is part of the key, the same person gets a different id tomorrow. Tidemark can tell you how many people visited today. It cannot tell you that one of them also visited last Tuesday.
What we won’t claim
We don’t say Tidemark is “GDPR compliant”, and we make no legal promises on your behalf. Compliance depends on how you use it, where you operate and what else your site does. Tidemark removes the need for visitor-level data, which makes your obligations smaller and simpler. Ask a qualified adviser about the rest.
Tidemark Cloud privacy notice
This section explains how we handle personal data when you use Tidemark Cloud, the hosted service at app.tidemarkanalytics.com. It is operated by Michael Kinder, who is the data controller for your account data. For the statistics your own websites send us, we act as your processor and handle that data only on your instructions. Last updated October 21, 2026.
What we collect
- Account data: your name, email address, a hashed password, your timezone and the settings you choose (sites, goals, shield rules, API keys, team members you add).
- Billing data: payments are processed by Creem, our merchant of record. Creem collects your payment details, billing address and tax information. We receive only your plan, subscription status, customer ID and email, never your card number.
- Statistics from your websites: aggregate visit and event rows as described above (page, referrer, country, browser, device, custom events). We don’t store visitors’ IP addresses or raw user agents.
- Technical logs: our servers briefly keep standard access logs (IP address, requested address, status) to run, secure and debug the service. They are rotated automatically and kept only as long as needed.
- Emails we send you: confirmation and password-reset messages, usage notices (for example when you reach your monthly event limit) and subscription notices. We don’t send marketing email without your consent.
Cookies and local storage
When you sign in to the dashboard we set one essential session cookie. The tracking script we give you sets no cookies and uses no local storage on your visitors’ devices. The dashboard remembers your light or dark choice and a few interface preferences in your browser’s local storage. We use no advertising or cross-site tracking cookies.
Why we use it
- To provide the service and your account (performing our contract with you);
- To bill you and meet tax and accounting obligations (legal obligation, and the contract);
- To keep the service secure, prevent abuse and fix problems (our legitimate interests);
- To contact you about the service (contract and legitimate interests).
Who we share it with
We don’t sell personal data and we don’t share it with advertisers. We use a small number of providers to run the service: Creem (payments), OVHcloud (server hosting), Cloudflare (network security and delivery) and hosting.com (outgoing email). Some of them process data in the United States or elsewhere outside your country, under their own data protection commitments. We may also disclose information where the law requires it.
How long we keep it
- Account data: while your account is open, and for up to 30 days after you delete it.
- Statistics: for the history your plan includes (6 months on Free, 5 years on Pro), then deleted automatically. Deleting a site removes its data.
- Billing records: as long as tax and accounting law requires, held by Creem.
- Backups: server backups expire within about 30 days.
Your rights
Depending on where you live (for example under the GDPR, UK GDPR or California’s CCPA/CPRA), you can ask to access, correct, export or delete your personal data, to restrict or object to some processing, and to complain to your data protection authority. Email support@tidemarkanalytics.com and we will respond within 30 days. You can also export your statistics and delete your account yourself from the dashboard.
Security
Connections are encrypted (HTTPS), passwords are hashed, two-factor sign-in is available and access to our servers is restricted. No system is perfectly secure; if a breach affects your personal data we will tell you as the law requires.
Children and changes
The service is not intended for people under 16. If we change this notice in a way that matters, we’ll update the date above and notify you by email or in the dashboard.
This website
This site sets no cookies and loads no third-party scripts, fonts or trackers. It measures itself with Tidemark, installed on our own server, and the resulting dashboard is public so you can see exactly what is collected. The only thing stored in your browser is your light or dark theme choice, if you change it. Personal data for Tidemark Cloud accounts is covered in the notice above.