Privacy

Account

When you create an account we store the name and email you submit, a password hash if you use email sign-in, and the sign-in method if you use Google. A session cookie keeps you signed in. We use this to open your workspace and to tell your sites apart from other accounts. After a successful sign-in we email that address with the time, the approximate location, the operating system, and the browser.

Websites you add

We store the name and address of each website you add. While the console is open, Scutumweb requests that address from our server and stores the time, whether it answered, the HTTP status, the response time, and the page title. That check is availability only. It does not read visitor traffic.

Cookies

This console sets two cookies on scutumweb. scutumweb_consent remembers whether you accepted cookies or kept essentials only, and it lasts one year. The sign-in session cookie is essential and keeps you signed in. Report preferences stay in this browser.

On a website where you install the snippet, the visitor’s browser gets scutumweb_id and scutumweb_seen for one year, and scutumweb_sid for that browsing session. These cookies identify a browser, not a named person. Clearing cookies starts a new visitor id.

The tracking snippet

Visitor counts start only after you paste the snippet on a site you control. The snippet stores a visitor id in the cookies scutumweb_id and scutumweb_seen, and a session id in scutumweb_sid. The same ids are kept in local storage when the browser allows it. Each hit sent to Scutumweb can include the page path, page title, referrer, device type, browser, operating system, screen size, whether the visitor id was seen before, campaign and keyword parameters from the page address, scroll depth, click position as a percentage of the page, time on the page, and a country code taken from the network edge, plus the city, region, and coordinates looked up from that network. We do not store the visitor’s name, email, or full IP address in the hit record.

How the reports are used

Hits are shown only in the account that owns the website. They are not sold. They are not used to build an advertising profile. Console preferences, such as the selected period and theme, stay in your browser.

How long we keep it

Removing a website from your account deletes its page hits, availability checks, and goals. You can ask us to delete your account and the measurements still attached to it by emailing info@infralocksystems.cloud. We keep the request only as long as we need it to complete the deletion.

Your visitors

If you install the snippet, you are responsible for telling your visitors that the site measures traffic, and for honouring the access and deletion requests that apply to you. A visitor can clear the stored ids from their browser. To remove hits already received, write to the address above and include the website.