Privacy Policy

Who we are

Clicked (clicked.is) is a website analytics service operated by the team behind Shoprocket. In this policy, "we" and "Clicked" mean the operator of clicked.is, "you" means a customer using Clicked on your website, and "visitor" means a person who visits a website that runs Clicked.

The two relationships

When you use Clicked on your site, you are the data controller for your visitors and Clicked is your data processor - we process visit data on your behalf, under your instructions. When you sign up for a Clicked account, we are the controller of your own account details.

What we collect from visitors

Clicked is designed to work without identifying anyone. For each visit we process:

• Page URL, referrer, and UTM campaign tags on the link.
• Coarse, approximate location derived from the IP address (rounded to roughly city-region level) - we do not store the raw IP address in our analytics tables.
• Device type and user-agent category, used to drop bots at the edge.
• Commerce events (add-to-cart, purchase, order value) read from the ad pixels and cart you already run, aggregated by traffic source.
• A short-lived, server-side session identifier used only to de-duplicate a single browsing session. It is not stored on the visitor's device and is not a cross-site or persistent identifier.

What we do not do

• We do not set or read cookies on the visitor's device.
• We do not fingerprint devices or use any persistent cross-site identifier.
• We do not build advertising profiles or sell data.
• We do not identify individual EU/UK visitors - reporting is aggregate, by source.

Why a cookie banner usually isn't required

Consent banners exist because most analytics store information on the visitor's device (cookies, local storage) and build a persistent profile. Clicked does neither, so in most jurisdictions there is nothing to consent to for our processing. You remain responsible for consent relating to any other scripts on your site (including the ad pixels Clicked reads from). If your own legal advice requires a banner, add one - Clicked does not depend on it.

Your Clicked account

If you create an account we store your email address and authentication details, the sites you own, and basic usage needed to run the service. We use this to operate your account, provide support, and send essential service messages.

Where data is processed

Clicked runs on Cloudflare's global network. Visit data is processed at the edge location nearest the visitor and stored in Cloudflare's data stores. Cloudflare acts as our sub-processor.

Retention

Aggregated analytics are retained for as long as your account is active so you can see trends over time. You can request deletion of your data at any time. Trial sites that are never claimed are periodically pruned.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete personal data, and to object to or restrict processing. Because we hold almost no visitor-level personal data by design, most requests concern account data. To exercise a right, email privacy@clicked.is. If you are a visitor to a site running Clicked, contact that site's owner (the controller); we will assist them.

Changes

We will update this page when our practices change and revise the date above. For the specifics of the EU/UK regime, see our GDPR notice. Questions? privacy@clicked.is.