Snapshot 250201
Normalized text
Scripts and page chrome removed; this is what change detection compares.
TL;DR: For plausible.io visitors, we do not use cookies and we do not collect any personal data. If you decide to create an account, we ask for the bare minimum and only share it with services that are absolutely necessary for the app to function. At Plausible Analytics, we are committed to complying with GDPR, CCPA, PECR and other privacy regulations on our website and in our analytics product. The privacy of your data — and it is your data, not ours! — is a big deal to us. In this policy, we lay out what data we collect and why, how your data is handled and your rights to your data. We promise we never sell your data: never have, never will. If you have placed the Plausible Analytics script on your website, take a look at our data policy for details on the information we do collect about your website visitors on your behalf. Data controller Plausible Insights OÜ Tartu, Estonia Contact: privacy@plausible.io For full company details, see our imprint Two types of data we handle There are two distinct types of data in Plausible Analytics: Website visitor data (your visitors): This is the data collected via the Plausible script on your site. This data is processed entirely within the European Union and never leaves the EU. Customer account data (you as a customer): This includes your email address, billing details and support communication. To operate our service, we use a small number of trusted external service providers, some of which may process data outside the EU with appropriate safeguards in place. Data processing roles For website visitor data collected on behalf of your website, Plausible acts as a data processor. For customer account data (such as account details, billing and support communication), Plausible acts as a data controller. For more details, see our Data Processing Agreement. As a visitor to the plausible.io website The privacy of our website visitors is important to us so we do not track individual people. As a visitor to the plausible.io website: No personal data about visitors is collected or stored No information such as cookies is stored in the browser No information about visitors is sold, and any processing is limited to trusted service providers where necessary to operate the service No information is shared with advertising companies or used for advertising purposes No information is mined and harvested for personal and behavioral trends No information is monetized We use Plausible Analytics to collect some anonymous usage data for statistical purposes. The goal is to track overall trends in our website traffic, not to track individual visitors. Data collected includes referral sources, top pages, visit duration, information from the devices (device type, operating system, country and browser) used during the visit and more. You can see full details in our data policy. As a customer and subscriber of Plausible Analytics Our guiding principle is to collect only what we need and to process this information solely to provide you with the service you signed up for. We use a small number of trusted external service providers for certain service offerings. These service providers are carefully selected and meet high data protection, data privacy and security standards. We only share information where necessary to provide the service and contractually require them to keep this information confidential and to process personal data only according to our instructions. Legal basis for processing (GDPR) We process personal data under the following legal bases: Contract: to provide the Plausible Analytics service, including account access, billing and essential functionality such as maintaining logged-in sessions Legitimate interest: to operate and improve our website and services What we collect, what we use it for and services we use An email address is required to create an account. You need to provide us with your email address if you want to create a Plausible Analytics account. That’s so you can log in and personalize your account, and so we can send you invoices, updates or other essential information. A persistent first-party cookie is stored to keep you logged in. This is necessary for the service to function and so you don’t have to log in on each returning session. Your website stats are encrypted and hosted on European-owned infrastructure, with the main servers powered by 100% renewable energy in Falkenstein, Germany. Your site data never leaves the EU. Account data is handled by the service providers listed below. We use a small number of trusted external service providers. Subprocessors Your website stats (your visitors’ data): Hetzner (European, Germany): server infrastructure and hosting Bunny (European, Slovenia): CDN, DNS and DDoS protection UpCloud (European, Finland): database hosting and storage of data exports These are the only subprocessors that touch visitor data. All three are European-owned and your site data never leaves the EU. Your account data (customers and subscribers): Paddle: payment processing Postmark: transactional emails and email reports. Open and link tracking are disabled on all emails. Gravatar: account profile picture, fetched via a proxy to ensure no personal data is exposed DuckDuckGo: site favicon, fetched via a proxy Google (optional): if you import Google Analytics data or connect integrations, Google may share account-related data with us to provide the service. Help Scout and Anthropic (optional): support correspondence. Help Scout stores the emails and Anthropic may help us draft replies. Anthropic doesn’t use this data to train its AI models. Nolt (optional): product feedback, only if you submit feedback For visitors to plausible.io: Friendly Captcha (European, Germany): spam protection on our registration and login pages Algolia and Anthropic (optional): documentation search, only if you use the search on our docs site. Algolia provides the search and Anthropic powers the AI answers. Anthropic doesn’t use your search questions to train its AI models. Mailchimp (optional): blog subscriptions, only if you subscribe to our blog. Open and link tracking are disabled on all emails. For more details on our subprocessors, see our Data Processing Agreement. International data transfers Where we use third-party providers outside the European Union, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission. Retention of data We retain your information for as long as your account is active and as necessary to provide you with the service. We do not retain personal data longer than necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law. You can delete your Plausible Analytics account at any time. All your data will be permanently deleted without undue delay upon account deletion. Your rights You have the right to: Access your personal data Correct inaccurate data Request deletion of your data Object to processing where applicable To exercise any of these rights, contact us at privacy@plausible.io. Changes and questions We may update this policy as needed to comply with relevant regulations and reflect any new practices. Whenever we make a significant change, we will announce it on our company blog or social media profiles. Contact us at privacy@plausible.io with any questions, comments or concerns. Last updated: November 2026 Clarified wording. No change to how we handle your data. Made and hosted in the EU 🇪🇺 Funded entirely by our subscribers. Why Plausible? Simple metrics Lightweight script Privacy focused Open source No cookie banner Features Ecommerce SaaS Publishers Agencies Public sector White label Enterprise Explore vs Google Analytics Migrate from GA4 vs Matomo vs Cloudflare GA4 accuracy Paid vs free Right for you? How to choose WordPress plugin Google Tag Manager Search Console Data Studio NPM package Resources Documentation Blog Tools What's new Status GitHub X (Twitter) Bluesky Mastodon LinkedIn Company About Pricing Contact Privacy policy Data policy Terms DPA Security Compliance Procurement Imprint