Snapshot 59610
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Plausible Analytics is a privacy-first web analytics startup that’s built to enable you to comply with GDPR, CCPA and other privacy regulations that impact your business. You entrust us with your site data and we take that trust to heart. We’re committed to being transparent, securing your data, eliminating system vulnerabilities and ensuring continuity of access. TL;DR Here’s a brief summary of our data security practices: All data is encrypted in transit (TLS 1.2+) All visitor data is irreversibly hashed All visitor data is hosted in the EU on EU-owned servers User passwords are hashed and salted You can enable two-factor authentication (2FA) You can configure Single Sign-On (SSO) Our software is updated multiple times per week We maintain a public changelog Vulnerability scans run regularly and dependency scans run daily All data is backed up daily and restore tests run quarterly Data access is firewalled and user-restricted Our code is transparent and can be audited Performance is monitored and uptime is disclosed Aggregated stats can be exported via CSV or queried through our stats API. Enterprise customers can receive individual event records through scheduled raw event data exports We don’t collect or store personal data about website visitors that can be used to identify individuals We don’t store debit or credit card details We do not store visitor data outside the EU We don’t outsource our software development We don’t outsource our infrastructure management We do not sell your data and only share it with trusted service providers where necessary to operate and provide the service Here’s a more detailed overview of the technical and organizational security measures we use to secure Plausible and protect your data. Data minimization Plausible is a privacy-first tool so we don’t collect or store personal data that can be used to identify individuals. Even though the purpose of Plausible is to track the usage of a website, this can still be done without tracking, collecting or storing personal data, without using cookies and while respecting the privacy of your website visitors. By using Plausible, all the site measurement is carried out in an anonymous and privacy-friendly way. We minimize data collection in general. We measure only the most essential data points and nothing else. Personal data We don’t use cookies, browser cache or local storage. We don’t store, retrieve or extract anything from visitor devices. The data we process cannot be used to identify any single individual. Every HTTP request sends the IP address and the User-Agent to the server so we use that. We generate a daily changing identifier utilizing the visitor’s IP address and User-Agent. To anonymize these data points and make them impossible to relate to the user, we run them through a hash function with a rotating salt. This generates a random string to calculate unique visitor numbers for the day. The salt is rotated and deleted every 24 hours. The raw IP address and User-Agent are never stored in logs, databases or anywhere on disk. For full details, please look at our data policy. Data encryption To protect against access, modification or theft of data, all data is encrypted in transit and secured at rest. In transit we use TLS 1.2 or newer, with TLS 1.3 preferred. We use hashing techniques to ensure that visitor data cannot be reversed or used to identify individuals. The use of rotating salts adds an additional layer of protection. Server location All visitor data is kept encrypted in Germany on servers owned by a German company (Hetzner). This ensures that all website data is covered by the European Union’s strict data protection laws. Visitor data does not leave the EU. Data ownership You retain full ownership and control of your website data. We do not sell your data and only share it with trusted service providers where necessary to operate and provide the service. Data portability You can export aggregated stats at any time in CSV format or query them using our stats API. Enterprise customers who need individual event records can use scheduled raw event data exports, delivered daily to their S3-compatible storage. Data deletion You are fully in control of any website data we collect on your behalf. You can permanently delete your Plausible account and/or permanently delete all of your site data at any time. User identification and authorization Passwords are hashed and salted. You can enable two-factor authentication (2FA) as an extra security layer. You can also configure Single Sign-On (SSO). We list active sessions in your account settings and allow you to remotely log out of other devices. Sessions expire automatically after inactivity. Data sharing controls You control how your data is shared. You can invite users, assign permissions, create shared links, configure email reports or make dashboards public. Internal access controls Our team does not access customer data on a routine basis. Access is limited to cases such as support requests or system maintenance. We use role-based access controls and restrict server access to specific individuals. All access is logged and monitored. Internal access to our systems goes through a zero trust network layer protected by single sign-on and multi-factor authentication. Backups and disaster recovery All service data is backed up daily on automated schedules. Backups are encrypted (AES-256), stored in the EU, retained for 30 days and used only for recovery purposes. Restore tests run at least quarterly to verify that backups actually work. We maintain a formal business continuity plan and a disaster recovery plan, both reviewed at least annually. Incident response We maintain a formal incident response plan with defined severity levels. The plan is tested with regular drills and every significant incident ends with a post-incident review. If a breach affects your data, we notify you without undue delay and no later than 48 hours after becoming aware of it. Subprocessors We use a limited number of subprocessors where necessary to provide the service. These are carefully selected and bound by data protection agreements. For more details, see our privacy policy. Payment information Payments are handled by Paddle. We do not store payment card details. Physical security Plausible is hosted within data centers provided by Hetzner, which maintains strong physical and environmental security controls. Availability and infrastructure monitoring We monitor application performance and infrastructure around the clock. Alerts page an on-call engineer at any hour. Our CDN shields the service against DDoS attacks at the edge. We aim to provide continuous availability but do not guarantee uninterrupted service. You can view current and historical uptime on our status page. You can audit our entire code base Our code is open source and publicly available. This allows independent verification of our security and privacy practices. Software quality assurance We deploy updates multiple times per week. Every change goes through peer review and automated testing before release and authors cannot approve their own changes. Every change ships with a rollback plan. Automated dependency scanning runs daily across all package ecosystems and opens update requests when a vulnerability is found. Regular vulnerability scans run on top of that. Data privacy and legal documents Our legal documents including our terms of service, privacy policy, data policy and data processing agreement are publicly available. For a single page covering all compliance and security documentation for vendor reviews, see plausible.io/compliance. Reporting security problems If you discover a vulnerability, please report it responsibly. Details are available in our vulnerability disclosure program. Security questions or concerns? If you have any questions about our security practices, please contact us. Last updated: August 2026 Added specifics on encryption, backups, incident response and monitoring. No changes to data handling. Made and hosted in the EU 🇪🇺 Funded entirely by our subscribers. Why Plausible? Simple metrics Lightweight script Privacy focused Open source No cookie banner Features Ecommerce SaaS Publishers Agencies Public sector White label Enterprise Explore vs Google Analytics Migrate from GA4 vs Matomo vs Cloudflare GA4 accuracy Paid vs free Right for you? How to choose WordPress plugin Google Tag Manager Search Console Data Studio NPM package Resources Documentation Blog Tools What's new Status GitHub X (Twitter) Bluesky Mastodon LinkedIn Company About Pricing Contact Privacy policy Data policy Terms DPA Security Compliance Procurement Imprint