← Back to home

Privacy Policy

Last updated: February 2026

What We Collect

easyfunnel.co collects analytics data on behalf of our customers (website and app owners). This data is used to help our customers understand how visitors interact with their products.

  • Anonymous session ID (random UUID, not fingerprinting)
  • Page URLs visited
  • Events triggered (button clicks, form submissions)
  • Browser, OS, screen size, language, timezone (from User-Agent and JS APIs)
  • Optional: user ID if the developer explicitly calls .identify()

What We Do NOT Collect

  • IP addresses (not stored in events; may appear transiently in server logs)
  • Email addresses (unless the developer explicitly passes them in event properties)
  • Third-party cookies — we never set or read third-party cookies
  • Device fingerprints
  • Any PII by default

Cookies

By default, easyfunnel uses localStorage for session continuity and sets no cookies. If a developer enables cross-subdomain mode, a single first-party cookie (_ef_sid) is set on the root domain to maintain session identity across subdomains. This is a functional/analytics cookie, not a tracking cookie. No third-party cookies are ever used.

GDPR

Because easyfunnel does not use third-party cookies and collects no PII by default, most jurisdictions do not require a cookie consent banner for basic usage. When cross-subdomain mode is enabled (first-party cookie), a cookie notice may be required depending on your jurisdiction. Consult your legal advisor for your specific case.

A Data Processing Agreement (DPA) is available on request. Users can request data deletion by emailing privacy@easyfunnel.co.

Data Storage & Security

  • All data is stored in Supabase (PostgreSQL) with row-level security
  • All API communication is over HTTPS
  • Project API keys can only write events (no read access)
  • Account API keys provide full read/write access and can be rotated
  • Tenants can never access each other's data

Data Retention

Event data is retained for 12 months on the Indie plan and 24 months on the Startup plan. After account deletion, all data is permanently removed within 30 days.

Contact

For privacy-related inquiries, contact privacy@easyfunnel.co.