This Privacy Policy explains how Webtions OU (“we”, “us”) processes personal data when you use Analytics at https://dash.webtions.com (the “Service”). We are established in Estonia and process data in line with the EU General Data Protection Regulation (GDPR) where it applies.
Webtions OU, Sepapaja 6, Tallinn 15551, Estonia. VAT EE102051737. Contact: mail@webtions.com.
If you are a site owner using the Service on your own websites, you are typically the controller of visitor analytics for those sites. We act as your processor for that visitor data. We are the controller of dashboard account data (login, billing contact details you give us, and Service administration).
Analytics is a privacy-first web analytics product hosted on Cloudflare. Site owners install a small tracker script. The Service records aggregated usage for sites they manage, shows dashboards, optional Search Console metrics, optional uptime checks, and optional email digests.
Lawful basis when we are processor: your instructions as site owner (Art. 28 GDPR). When we are controller for our own product analytics on webtions.com properties: legitimate interests in understanding our sites, balanced against visitor rights (Art. 6(1)(f)).
Lawful basis: contract / steps prior to contract (Art. 6(1)(b)), and legitimate interests in securing the Service (Art. 6(1)(f)).
The public tracker does not set cookies. The dashboard uses essential cookies for session authentication and CSRF protection. “Keep me signed in” extends the session cookie lifetime (up to 30 days).
Aggregated analytics and archived logs are kept while your site remains on the Service, unless a retention setting or deletion removes them. Daily visitor-hash salts expire so older hashes cannot be re-derived. Account data is kept while the account exists; you may ask us to delete it. Search Console tokens are removed when you disconnect.
We do not sell personal data. We share data with processors above to run the Service, or when required by law. Share links you create expose analytics views to anyone with the link — treat them as secrets.
Cloudflare and Google may process data outside the EEA. Where required, transfers rely on appropriate safeguards such as Standard Contractual Clauses offered by those providers.
Under GDPR you may request access, rectification, erasure, restriction, portability, and objection where applicable. Contact mail@webtions.com. You may lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or your local supervisory authority.
The Service is not directed at children under 16. We do not knowingly create dashboard accounts for them.
We may update this policy. The “Last updated” date above will change. Material changes may also be noted in the product or by email to account holders.
Webtions OU, Sepapaja 6, Tallinn 15551, Estonia. mail@webtions.com. Web: https://webtions.com.