Website privacy notice

This notice covers your visit to openattribution.org. It does not cover the OpenAttribution telemetry service, dashboard, or API - those are covered by our service privacy policy.

OpenAttribution is a community interest company limited by guarantee, registered in England and Wales (company number 17002582). Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ.

What we collect

Server logs

Our servers log IP addresses, user agent strings, request paths, and timestamps for operational and security purposes. Logs are retained for 30 days, then deleted.

Analytics

We use PostHog to see which pages are visited and how the site is used. It runs cookieless - we hold no persistent identifier for you, so we cannot link your visits over time or across devices. We do not record sessions and we do not capture what you type into forms.

Analytics requests are routed through a path on our own domain (openattribution.org/ingest) and forwarded server-side to PostHog's EU infrastructure. Your browser makes no requests to third-party analytics domains.

Cookies

If you are not signed in, we do not set any cookies - no analytics cookies, no tracking pixels, no third-party cookies. The analytics described above is cookieless.

If you sign in, a single session cookie is set. It is httpOnly, Secure, SameSite=Lax, and expires after 30 days. See our service privacy policy for details.

Legal basis

We process server logs and cookieless analytics under legitimate interests (security, debugging, abuse prevention, and understanding how the site is used). We have assessed that this processing is necessary and does not override your rights - it uses no identifier that singles you out.

Who we share data with

Website hosting and content delivery are provided by Cloudflare (Cloudflare Pages). Cookieless analytics data is processed by PostHog on its EU infrastructure under a data processing agreement. We do not share data with third parties unless required by law, and we do not sell data or use it for advertising.

Your rights

Under UK and EU data protection law you can access, correct, or delete your data, or object to processing. Contact us at privacy@openattribution.org or submit a request via our privacy request form.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (UK) or your local supervisory authority if you are in the EU.

Contact

OpenAttribution
71-75 Shelton Street, Covent Garden
London, WC2H 9JQ
United Kingdom
privacy@openattribution.org