Compliance notes

What Tidemark's design does

• Sets no cookies and uses no local storage on the visitor's device.
• Stores no IP address and no raw user agent.
• Doesn't track across days, sites or devices.
• Doesn't send data to third parties. On a self-hosted installation, the data is in your own database. The only outbound request is the update check for the latest version number, which you can turn off.
• Doesn't need a signed-in visitor or any profile.

What it leaves to you

• Your privacy notice. Say that you use analytics and what it measures.
• Custom properties. Tidemark stores what you send. Keep personal data out of event names and properties.
• Geolocation. City-level location, if you enable it, is derived from the IP at request time.
• Backups, logs and your host. Your web server may keep its own access logs outside Tidemark.
• Retention. Decide how long raw data is useful and set TIDEMARK_RETENTION_DAYS .

Respecting visitors who opt out

Visitors can exclude themselves by setting localStorage.plausible_ignore = 'true' in their browser. By default, browsers with Do Not Track enabled are not treated specially; you can choose to honor Global Privacy Control and Do Not Track per site in Privacy controls.