Privacy policy

Who we are

Datacenter is operated by Datacenter LLC, at datacenter.so, app.datacenter.so and go.datacenter.so. You can reach us at hello@datacenter.so for anything on this page, or by post at Datacenter LLC, 5142 N Academy Blvd PMB 1021, Colorado Springs, CO 80918, United States.

For your account, Datacenter decides what is collected and why: under the GDPR we are the controller. For the visitors, customers and callers of the sites our customers track, the customer decides, and we process that data for them under our data processing agreement: they are the controller and we are their processor (a service provider under California law).

If you have an account

We keep what we need to run your account:

• Your email address and a hash of your password. We never store the password itself.
• If you sign in with Google or GitHub: that account's id, its verified email and your name. We never see that password and ask for nothing else.
• Your sites, goals, short links, domains and settings.
• Your plan and billing status. Stripe handles your card. We never see the card number.
• If you turn on two-step sign-in: your authenticator key, encrypted, and a keyed hash of each recovery code. Never the codes themselves.
• Sign-in sessions, with the browser's user agent so you can see where you are signed in.
• Short records of sign-in and sign-up attempts, with the IP address they came from, to stop abuse. They are deleted after a day.
• When you sign up, sign in or reset a password, Cloudflare Turnstile checks that you are a person. It sees your IP address and browser, not your password.
• If you import history from Google Analytics: read-only access to the property you pick, used once to copy its daily totals and top pages, sources, campaigns, countries, devices and key events into that site's dashboard. The login is kept encrypted while the import runs and handed back to Google when it ends. Datacenter's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: it is shown only to you and the people you share the site with, never used for ads, never sold, and not read by people at Datacenter unless you ask us for help with it, it is needed to keep the service secure, or the law requires it.

We use your email to sign you in, to send account mail like email confirmation, password resets and billing notices, and for reports you turn on. We also send a few emails about your own account: setup tips, milestones and plan reminders. Each kind has its own unsubscribe link and a switch in Alerts. Billing notices, like a failed payment, cannot be turned off. We never sell your email or give it to anyone to market to you.

If you ask for the tracking checklist on our website without an account, we keep your email to send it and two short follow-ups, only after you confirm the address. An address that is never confirmed is deleted after 7 days. Every email has a one-click unsubscribe.

If you visit a site that uses Datacenter

Sites that use Datacenter send us a small record of each page view and event. In Private mode, the default:

• No cookies are set and nothing is stored in your browser.
• Your IP address is used to work out your country, then dropped. It is never stored.
• A visitor hash is made from a daily salt, the site, your IP address and your user agent. The salt is replaced every day and the old one deleted, so you cannot be followed from one day to the next or from one site to another.
• We record the page's path (never the rest of its address), the referring site, campaign tags, ad click ids from the address, your country, device type, browser and operating system. A campaign tag that holds an email address or phone number is left out.
• If the site reports a signup, purchase or lead to Meta, Google, TikTok or Pinterest, we record that it happened, with the value, currency, order id and Meta's event id. We never read the email, phone number, name or hashed details those tags send.

On paid plans, sites also record heatmaps: for each page view, the elements you click (a short path to the element, where in it and where on the page you clicked, and for a link or button its visible name, up to 30 characters), how far down the page you scroll, and whether the screen is a phone, tablet or desktop. Nothing you type is recorded, and neither are clicks in form fields, mouse movement or recordings of your visit. A name with an @ or four digits in a row is left out. Heatmap data carries no visitor hash, random id, cookie or ad click id, so it cannot be tied to you or to your visit.

A site owner can turn on 90-day tracking. The script then keeps a random id and ad click ids on that site's own domain for 90 days, so a later sale can be tied to an earlier ad or link. The site owner is responsible for asking your consent where the law requires it.

A site owner can show a simple cookie banner from Datacenter. Until you press Accept, nothing is stored on your device. Your answer is kept in a small cookie on that site, so the banner does not ask again.

With 90-day tracking, once you agree where the site asks, the site owner sees an anonymous profile for your random id: when you first and last visited, how many visits, the page you landed on, where you came from, your country, device type and browser, and the pages and events of each visit. It holds no IP address, email, phone or name, and it is deleted 90 days after your last visit.

With 90-day tracking, a site owner can also keep customer profiles. Your email, phone number and name reach us when you sign up or buy (the owner sends them, connects a store or email tool, imports a list, or has us read the email, name and phone fields of forms you send, such as sign-up and sign-in forms). We turn your email and phone number into SHA-256 hashes to match you. While the owner keeps "Show contact details" on, we also keep your email, phone number, name and details from an imported list, encrypted, so the owner can see who you are. We never read password, card or hidden fields. None of this goes into page view statistics. We send the hashes to Meta or another ad platform only if the owner connected it and marked that goal to be sent. If the owner turns on sending to their CRM (HubSpot or GoHighLevel), Airtable or a webhook, we send that tool your email, the name and phone we keep, where you came from and what you bought. The owner picks that tool and is responsible for it. The owner can delete your profile at any time. Ask them first if you want it gone.

If your browser sends Global Privacy Control, we take it as your request that your data not be sold or shared. We then send nothing from that visit to Meta, Google, Microsoft, TikTok or any other ad platform. On sites with 90-day tracking we keep the signal with your random id for 13 months, so later sales or deals tied to it are not sent either. The site's own statistics still count your visit, since that is neither a sale nor a share.

A site owner can set up automations: emails and texts (when shipped) sent from Datacenter on the owner's behalf when you sign up, buy or visit certain pages. For these we keep what was sent to you and when, and whether you opened it, clicked it or replied, but never your email address or phone number with it. We keep a record of your consent to texts (the words you agreed to, where and when) and of any unsubscribe or STOP, so you are never written to again after you say no. Every email has an unsubscribe link and the sender's postal address; replying STOP to a text stops texts from that site. Texts from automations wait for 8 am to 9 pm your time.

A site owner can use call tracking (when shipped): the site shows you a phone number that forwards to the business. When you call it, we record the time, how long the call lasted, whether it was answered, the area your number belongs to, and, for a number shown on the website, the visit that showed it to you. Your phone number is used to match the call to your profile and is kept encrypted, only while the owner keeps "Show contact details" on. If the owner turns on recording, you hear a notice before the call connects; recordings are kept by our phone provider for up to 12 months, or until the owner deletes them.

If you click a short link

A click on a Datacenter short link records the link, the time, the referring site, your country, device type and browser. Your IP address is not stored. If the link leads to a site the same customer tracks, we add a link id to the address so the visit can be tied to the click.

Our own website

datacenter.so is measured with Datacenter in Private mode (when shipped). We set cookies only when you use the app at app.datacenter.so, open a partner's link, or arrive from one of our tagged ad or campaign links: __Host-dc_session keeps you signed in for up to 30 days, and dc_csrf protects forms. dc_in says only that this browser is signed in, so datacenter.so opens the app for you; it is not a password and lasts as long as your session. If you open the home page on purpose while signed in, dc_home keeps datacenter.so showing it, instead of the app, for 30 minutes. When a sign-in from before the app moved to app.datacenter.so carries over, dc_hb ties that one-time handoff to this browser for 60 seconds. In the app, dc_live_pick remembers a site you pick in the Live view, for a year, so Live in the sidebar opens it again. dc_device is a random id for this browser, kept 400 days, so we can email you when your account signs in from a browser it has not used before. If you use two-step sign-in, st_2fa holds your sign-in for up to 10 minutes while you enter your code. Signing in with Google or GitHub sets dc_oauth for 10 minutes to check the reply. Signing in with your company sets dc_sso for 10 minutes the same way. A plan you pick on the pricing page is kept in dc_plan for a day, until you sign up. A website address you type on the home page is kept in dc_site for 60 minutes, with this device's time zone, so your first site is made with it when you sign up; it is deleted then. If you open an agency partner's referral link, dc_ref holds that agency's code for up to 90 days, so the agency gets credit if you sign up. It holds nothing else and is deleted when you sign up. If the link that brought you carries campaign tags (utm_source and the like) or an ad click id, dc_src keeps those tags, the site that linked to you and the page you landed on for up to 30 days, so we know which campaign brought you if you sign up. It is never set when your browser sends Global Privacy Control, or when you visit from the EEA, the UK or Switzerland. At sign-up it is copied to your account and deleted. Your light or dark theme choice is kept in your own browser's storage.

Who helps us run Datacenter

These companies process personal data for us. Each gets only what its job needs.

• Cloudflare: Hosting, the database, event storage, backups, our email, the human check on sign-up and sign-in (Turnstile), DNS lookups and Workers AI.
• Stripe: Payments and invoices: Datacenter never sees your card number. Also reads sales from a Stripe account a customer connects.
• Anthropic: Datacenter Assistant on Solo, Studio, Agency and Custom.
• Twilio: Texts from automations, call tracking numbers and call recordings, and the business details US carriers ask for (when shipped).
• Amazon Web Services: Amazon SES and SNS: email from a customer's own domain, and the replies, bounces and complaints that come back (when shipped).
• Google Safe Browsing: Checks short link destinations, the address only.
• Meta, for our own ads: If you sign up after clicking one of our Meta ads: that you signed up, started a trial and made your first payment (with its amount), your email and account id as SHA-256 hashes, your IP address, browser and the ad's click id, so Meta can measure and improve our ads (when shipped).
• Have I Been Pwned: Checks new passwords against breaches, the first five characters of a hash only.
• Google, GitHub: Sign in with them: your account id, verified email and name.
• Apple, Google, Mozilla and Microsoft push services: Phone and browser alerts you turn on. The alert is encrypted so the push service cannot read it.

On Solo, Studio, Agency and Custom, Datacenter Assistant runs on Anthropic's Claude models. On Free, it runs on an open model hosted by Cloudflare Workers AI, inside the same Cloudflare account that hosts Datacenter. If Claude is unavailable or reaches this month's spending limit, the Workers AI model answers instead. The model runs only when an account holder uses the Assistant. See below.

When a customer connects one of their own tools, we send it what the customer turned on, and the customer is responsible for that tool: Google Analytics, Meta, Google Ads, Microsoft Ads, TikTok, LinkedIn, Pinterest, Snapchat, Reddit, X, HubSpot, GoHighLevel, Airtable, Klaviyo, Mailchimp, Attentive, Shopify, Wix, PayPal, OpenAI, Vercel, Calendly, Google Tag Manager, Google Search Console, Google Business Profile, Slack, Microsoft Teams, The customer's identity provider, Webhooks. Ad platforms never receive anything for a visitor whose browser sends Global Privacy Control. Some checks see only a domain name, never a person: crt.sh, rdap.org, European Central Bank, DNS hosts with one-click setup. The full list, with when each one is used, is on Data, retention and backups.

We do not sell personal data. We use it for advertising in one case only: when you sign up after clicking one of our own Meta ads, Meta hears about your sign-up, trial and first payment, as listed above, so it can measure those ads. We never send it when your browser sends Global Privacy Control or the visit came from the EEA, the UK or Switzerland, and you can ask us to stop at hello@datacenter.so.

If you use Datacenter Assistant

Datacenter Assistant answers questions and sets things up in your account. On Solo, Studio, Agency and Custom, Datacenter Assistant runs on Anthropic's Claude models. On Free, it runs on an open model hosted by Cloudflare Workers AI, inside the same Cloudflare account that hosts Datacenter. If Claude is unavailable or reaches this month's spending limit, the Workers AI model answers instead. When you use it, we send the model provider: what you type, the page and site you are on, and what the assistant reads to answer. That can be summaries of your stats and reports, the names of your goals, segments and campaigns, counts of customers and visitors, and the text of your site's public pages. We do not send your customers' or visitors' contact details (emails, phone numbers or names), passwords, keys or card numbers.

The provider handles it under its commercial terms, only to answer the request. We keep your conversations, the changes you applied and your saved drafts in your account so you can come back to them and undo changes. "New chat" hides a conversation; the change log stays with the site. Each change waits for you to press Apply.

Data from Facebook and Instagram

When you click Connect with Meta, Datacenter reads only what you approve: daily spend, impressions, clicks and purchases for the ad accounts you pick, and the URL tags of their active ads. It never creates, changes or pauses ads. The access token is encrypted before it is stored.

To delete this data, open the site in Datacenter, then Integrations, Ad spend, Meta Ads, and choose Disconnect Meta. That deletes the token, the ad accounts and all the spend we imported, at once. You can also remove Datacenter in your Facebook settings under Business integrations, which stops our access, or email hello@datacenter.so from your account's address and we will delete it for you within 30 days.

Data from the Wix and Shopify apps

A site owner can add Datacenter from the Wix App Market or the Shopify App Store. The app then reads data from their site or store for them. They are the controller of it, as for any other customer data.

Wix. When the app is added, Wix gives us the site owner's Wix login email (to make or find their Datacenter account), the site's name, published address and currency, and the app's plan in Wix. Wix also gives us a login for the site, which we keep encrypted. With it we read:

• The site's daily sessions, unique visitors, orders and sales for the last 62 days, from Wix Analytics. These are totals, with nothing about a person.
• Each approved order, as Wix sends it: its id, number, date, total, currency and product names, and the buyer's email, first and last name, phone and Wix contact id.
• Each new site member, as Wix sends it: their login email, display name and Wix contact id.
• On paid plans, once when the app is added: the paid orders of the last 62 days and up to 500 existing members, with the same details.

On Free, orders and members are not kept. On paid plans, each one counts as a sale or signup that holds no email, phone or name, and the email, name and phone go into the site's customer profiles, as described above: hashed to match, and kept encrypted only while the owner keeps "Show contact details" on. With 90-day tracking, the random id of a buyer seen on Wix's thank-you page is kept against the order id for 30 days, to tie the sale to the visit.

When the owner removes the app in Wix, Wix takes the tag off the site and Datacenter stops reading from Wix at once: the encrypted login is deleted, nothing more comes in, and the buyers' random ids kept against order ids are deleted. What was already read stays in the owner's account, because it is their own business record: the site, its stats, and the customer profiles and orders. The owner can delete a profile, the site or the whole account at any time; it then goes as described under How long we keep data.

Shopify. When the app is installed, Shopify gives us the store's name, owner email, time zone, currency and primary domain, and a login we keep encrypted. With it we read the store's paid orders from the last 90 days, then each new or changed order, refund and new customer. For an order: its id, number, dates, total, amount received, currency, refunds and product names, and the buyer's email, phone, name and Shopify customer id. We also read the landing pages, campaign tags and ad click ids Shopify recorded for the order, and its IP address, which is used only to send the sale to an ad platform the owner connected. For a new customer: their email, phone and name. These go into customer profiles in the same way. With 90-day tracking, the app's checkout pixel sends the buyer's random id when a checkout finishes, kept against the order for 30 days.

When the owner uninstalls the app, syncing stops at once and the login is deleted. 48 hours later, or sooner if Shopify asks, we delete the store's Shopify orders, the identifiers Shopify gave us, the profiles only Shopify knew, and the connection. When Shopify passes on a customer's request, we email the owner what we hold about that customer, or delete that customer's profile and orders, at once.

How long we keep data

Stats are kept for as long as the customer's plan allows: 30 days on Free, 2 years on Solo, Studio and Agency, and while the account is open on Custom. Account data is kept while the account is open. You can delete your account at any time in Settings, Account, Delete account: we cancel your subscription, turn the account off at once, and delete your account data within hours: your sites, stats, customer profiles, short links, automations, reports, connections and keys, and the images you uploaded. We email you when it is done. Raw page views, events and clicks in Workers Analytics Engine cannot be deleted one by one, so they stay until they expire, within 3 months. They hold no IP address, and anything that looks like an email address is taken out before they are stored. Call recordings are deleted after 12 months, sooner if the site owner deletes them or the account is deleted. Billing records are kept as long as tax law requires, by Stripe. Deleted data can stay in our backups until they expire: 30 days for nightly copies, 12 months for monthly ones. Every period is on Data, retention and backups.

Your rights

You can ask to see, fix, export or delete the personal data we hold about you, to limit or object to how we use it, and to take it elsewhere. Download a copy of your data in Settings, Account, Download my data (a zip that stays ready for 7 days), and delete your account there too. For anything else, email hello@datacenter.so from the address on your account. We answer within a month. We may ask you to confirm the request from your account's address so no one else can make it.

If you visited a site, called a number or got a message from a business that uses Datacenter, contact that business first: they decide what is collected, and we help them answer you. We hold no IP address or cookie that could find you, so in Private mode we usually cannot single out your visits.

If you are in the EEA, the UK or Switzerland, you can also complain to your data protection authority. We would like the chance to fix it first.

Why we may use your data

For people in the EEA, the UK and Switzerland, the GDPR asks us to name a reason for each use. We run your account, bill you and send account mail because our contract with you needs it. We stop abuse, keep backups and keep Datacenter secure because we have a legitimate interest in a safe service. Setup tips and other emails about your account rest on that interest too, and you can turn each kind off. We keep billing records because tax law requires it. For data on our customers' sites, the customer picks the reason, such as consent for 90-day tracking where the law needs it.

Where your data goes

Datacenter is run from the United States on Cloudflare's network, which serves requests from the location nearest the visitor. Data is not pinned to one country, so personal data from the EEA, the UK and Switzerland can reach the United States and other countries. Those transfers are covered by the Standard Contractual Clauses in our data processing agreement and in our agreements with the companies listed above.

California

Under California law you have the rights above: to know what we collect, to correct it, to delete it, and to opt out of its sale or sharing. We do not sell or share personal information, as those laws use the words, and we do not use sensitive personal information to infer anything about you. We will not treat you differently for using these rights. Someone you authorize can ask for you, and we will check with you first.

In the last 12 months we collected, from account holders: identifiers (email, name, account ids), commercial information (plan and billing history), internet activity (sign-ins and use of the app), and rough location from your country. On our customers' sites we collect, for those customers: internet activity, rough location and, where the customer turns it on, identifiers such as email and phone. The sections above say where each comes from, why, and who receives it.

Children

Datacenter is a tool for businesses, and accounts are for adults. We do not knowingly collect personal data from children under 13, or under 16 in the EEA and the UK. Customers must not use customer profiles, emails or texts for children of those ages. If you think a child's data reached us, email hello@datacenter.so and we will delete it.

Changes

If we change this policy in a way that matters, we will email account holders before it takes effect and update the date at the top.