Privacy Policy

Last updated: April 18, 2026

Overview

BYOViral is a website analytics platform. The tracking script does not set cookies or other identifiers in your visitors' browsers. Instead, pageviews are recorded server-side and grouped into sessions using a short-lived fingerprint derived from the request.

What is collected from your visitors

When a visitor loads a tracked page, BYOViral records the following fields:

  • The IP address of the request, used to derive geographic location (country, region, city, approximate coordinates, timezone) and network information (ISP, ASN, organization).
  • Browser, browser version, operating system, operating system version, device type, device model, screen resolution, and preferred language.
  • The page URL, page title, referring URL, and any UTM campaign parameters.
  • A server-side visitor key and session key, both salted hashes — they are not stored in or returned to the visitor's browser.

No cookies, local storage, or other identifiers are written on the visitor's device. Visitors are not assigned an ID that persists across websites.

How data is used

Data is used to power dashboard metrics, per-session analytics, top pages / referrers / geographic reports, realtime visitor counts, CSV exports, and the public profile / ranking features for websites that opt in.

The owner of a tracked website can see the IP address, approximate location and network of each visit in their private visitor log. IP addresses are never shown on public stats pages, rankings or badges.

Visits from hosting and cloud networks, or with automation user agents, are labelled as likely bots. They are kept in a separate small log and are not counted in totals.

Data sharing

We do not sell analytics data and do not share it with advertising networks. Data is processed only by infrastructure providers (hosting, database, CDN) strictly as required to deliver the service.

Retention

The detailed visitor log is a rolling log: each website keeps only its most recent visitors, up to the size of the owner's plan (Free 500, Premium 10,000, Ultra 100,000 visitors), and older entries are deleted automatically. Likely-bot entries are limited to the latest 500 per website. Aggregated daily counts are retained indefinitely. Website owners can delete their website at any time to remove all associated records.

Website-owner controls

Website owners can exclude specific IP addresses, URL parameters, and bot traffic from tracking; choose Public, Private, or Password-protected visibility for their stats; and disable tracking by removing the script at any time.

Your rights

Visitors to tracked websites who wish to access, correct, or delete data about themselves should contact the operator of the website they visited. The operator is the data controller for analytics collected through their BYOViral account.

Data sources

Network (ASN) information uses IP to ASN data by DB-IP, licensed under CC BY 4.0. Geolocation uses GeoLite2 data created by MaxMind.

Contact

For privacy requests, use the contact page. https://www.byoviral.com/contact