What runs here
| Host | Purpose |
|---|---|
static.pathclue.com | The analytics script (client.js, about 2 KB gzip) that site owners add to their pages, and its optional extensions. |
api.pathclue.com | The collection endpoint the script and the SDKs send page views and events to. |
api-eu.pathclue.com and other region suffixes | Regional collection endpoints that keep data in that region once the region is open. |
The same script and endpoints also serve TapCub, the platform PathClue runs on. Live chat is served from separate askcub.com hosts.
Who operates it
These hosts are operated by the PathClue team (operated by TapCub). The websites and apps that load the script are run by their own owners, who decide what to measure and are responsible for telling their visitors. We act as their processor.
Privacy
- No cross-site cookies. In its default mode the script writes nothing to the visitor's device at all.
- Requests carry no credentials. The IP address is used only at the moment a request arrives — to estimate a rough region, rate-limit and spot bots — and is discarded, never stored.
- The visitor identifier is computed by the collector from the site, network address and browser details with a salt; the script sets no cookies. In strict mode the salt changes every day, so the same person is never linked across days.
- When the browser sends Do Not Track or Global Privacy Control, the script doesn’t run by default and the visit isn’t recorded.
The full details are in the privacy policy.
Bots and crawlers
Requests from bots, crawlers and AI agents are recognised with 197+ rules across 5 layers (user agent, request headers, client signals, network and frequency) and reported separately from human visits. Nothing on these hosts targets crawlers; you do not need to allow or block them for search engines to index the sites that use the script.
Blocklists and false positives
Privacy blocklists may list these hosts, and that is the visitor's choice; the sites that use the script keep working without it. If you maintain a security or malware list and believe one of these hosts is serving something harmful, or you see a false positive, write to hello@tapcub.com with the URL and what you observed.
Contact
Privacy questions, abuse reports and blocklist false positives all go to hello@tapcub.com. Say which one it is in the subject line and we will route it to the right person.