Real data that respects every visitor
PathClue counts visitors without cookies, never stores IP addresses and lets you choose how strict each site should be — with the controls your security team will ask about.
- No cookies by default
- IPs never stored
- GDPR · CCPA · PIPL modes
Counting visitors without tracking them
Privacy is the default setting, not an add-on.
- 1
No cookies, no storage
The collector derives a salted visitor identifier from the request, and nothing is written to the browser. In strict mode the salt changes daily.
- 2
IPs never stored
The IP is used once to look up the country and city, then discarded. You can truncate it further for some regions.
- 3
Signals respected
Global Privacy Control and Do Not Track are honoured; visitors who send them are counted anonymously.
- 4
You choose the tier
Anonymous, cookieless or identified — pick per site, and only use identifiers when you have a reason and consent.
The controls your legal and security teams ask for
Per-site settings, team access and a record of who changed what.
Compliance center
GDPR, CCPA and PIPL modes, consent requirements, regional overrides, personal-data stripping, retention and data-subject requests — per site, with a privacy-policy snippet generated from your settings.
- Consent before collection, when you need it
- Strip emails, phone numbers and ID numbers from events
- Retention per data type and data-subject requests
Team access and audit log
Owner, admin, analyst, viewer and read-only observer roles per site, user groups, two-factor sign-in and an audit log of exports, invites and setting changes.
- Roles and user groups
- Two-factor authentication
- Audit log you can review and push
Data you can trust
A tracking plan and data-quality checks keep unexpected fields out, and masking rules keep sensitive page text out of autocapture and replay.
- Masked selectors for autocapture and replay
- Input fields masked in replays by default
- Unplanned data flagged
| Event | Status | Last 7 days |
|---|---|---|
| signup_completed | In plan | 2,140 |
| purchase | In plan | 512 |
| add_to_cart | In plan | 1,248 |
| AddToCart | Not in plan | 37 |
Start from a preset that matches your rules
Apply a preset and the matching settings are written and locked, with a rationale you can export.
CNIL exemption
France’s consent-free audience measurement: cookieless, IP truncation and limited retention.
UK statistics exception
Settings aligned with the UK exception for analytics cookies and similar technologies.
German basic counter
A minimal counter configuration following the DSK guidance.
GDPR full consent
Identified analytics with consent required for EEA and UK visitors.
Where your data lives and how it is protected
Encrypted in transit
All collection and console traffic uses HTTPS. Profile contact fields are stored with AES-256 encryption, or not stored at all.
Hosted in the United States
Collection and storage currently run in the US region. Enterprise customers can deploy PathClue on their own infrastructure.
Yours to export or delete
Export reports and raw data at any time, shorten retention per site, and delete data on request.
Data that has to stay in your own environment?
- Self-hosted deployment
- Higher volume
- Custom integrations
- Dedicated support
Privacy & security questions
Anything else — open the chat in the corner and ask.