Sabilytics

GDPR

How Sabilytics handles your rights

If someone in the European Economic Area (EEA) uses Sabilytics, or visits a site you track with our snippet, GDPR may apply. That is true even when Sabilytics is not based in Europe.

We build privacy-friendly analytics on purpose: a lightweight snippet, no fingerprinting theater, and country-level location for live views. This page is honest about what that means for your rights today, and what we still need to ship.

Two roles

Account holders. If you sign up for Sabilytics, we are the controller of your account data (name, email, auth sessions, the sites you create).

Site visitors. When you install our snippet, we process visit events for you (path, referrer, hostname, coarse location, device hints, and a random visitor id stored in the browser). You typically remain the controller for that traffic; we act as your processor.

What we collect

  • Your account: name, email, authentication data, and the sites you configure.
  • Analytics events: page path, referrer, hostname, country (and related geo when the edge provides it), device / browser / OS, session id, and a random visitor id. Not a cross-site fingerprint.

Your rights as an account holder

At a minimum, Sabilytics should support the rights below. Here is where each one stands for people who have a Sabilytics account.

  • Delete your account (Right to Erasure)

    Coming soon

    Self-serve account deletion is not in the product yet. Email us and we will erase your account, sites, and associated analytics data. You can already delete individual sites from the dashboard.

  • Access your personal data

    Partial

    You can see your profile (name and email) in Settings. A full machine-readable dump of everything we hold on you is not available in-app yet. Request it by email.

  • Rectify inaccurate personal data

    Available

    Update your display name in Settings → Profile. For email or other account corrections, contact us.

  • Data portability (export)

    Coming soon

    We do not yet offer a one-click export of your account or site analytics. Until that ships, ask us for an export and we will provide what we hold in a portable format.

  • Restrict or object to processing

    By request

    If you need processing limited or stopped while a request is handled, email us. We will confirm what we can restrict without breaking core service security.

  • Withdraw consent

    Where consent applies

    Account access is provided so we can run Sabilytics for you (contract / legitimate interest for the service). Where we rely on consent for optional processing, you can withdraw it by contacting us. Signing out ends your session on that device.

Site visitors on properties you track

Visitors do not create Sabilytics accounts. Their rights usually run through you as the site owner. If someone asks you for access, erasure, or an export related to analytics on your domain, tell us and we will help remove or provide the event data we hold for that site where we can identify it.

Deleting a site in the dashboard removes its stored events. More self-serve visitor tooling (exports, targeted erasure helpers) is on the roadmap.

Make a request

Email hello@sabilytics.com with the right you need and the email on your Sabilytics account (or the site domain for visitor requests). We will respond as quickly as we can.