Privacy

The client is built to collect a session, not a person.

In the browser

• No cookies are set or read.
• No localStorage or sessionStorage entries are written.
• sessionId is 32 random hex characters, generated when the page loads. It is not reused across pages and is not tied to any account.
• aid is a fresh v4 UUID per page load, not a device or user identifier.
• No fingerprinting, no cross-site identifier, no third-party tag.

On the wire

Each beacon carries the envelope described in Events and payload: the page URL, viewport and screen size, web vitals, error counts and the event names you pass to InsightJS.track. Beacons go only to the endpoint you configure.

On the receiving side

• The client IP is used to answer the request and is not stored.
• The user agent is parsed for browser and platform facts, then dropped.
• Error messages are truncated at 120 characters; stack traces, DOM content, form values and request bodies are never sent.

What is not collected

• Names, email addresses or account identifiers.
• Keystrokes, mouse paths, form values or page content.
• Cross-site browsing history.

Questions about this page: Contact.