Privacy

crowne measures sites without tracking people. This page says what we store about the visitors of your sites, and about you as a customer.

Visitors of your sites

What we never store

• Cookies, or anything in the browser's storage.
• IP addresses.
• Full user-agent strings.
• Ids that link one visitor across days or across sites.

What we store

• The page address without its query string, and the referring site's host.
• UTM campaign fields and the kind of ad click, never the click id.
• Country, region, and city from the request, the browser and system names, a device class, a screen-size class, and the language.
• A visitor id: a hash of a daily salt, the site, the address, and the browser. We delete the salt after 48 hours; after that, nobody can link an id to an address.
• Event names and properties that your site sends. Your site must not send personal data in them.

Because crowne stores no personal data about visitors and nothing on their devices, your site does not need a consent banner for crowne.

You, as a customer

• Your email address and name, to sign you in and to send you account and billing email.
• Your passkeys, as public keys only, if you add them.
• Your sites, goals, funnels, keys, and members.
• Your billing details stay with Stripe. We keep only the Stripe customer and subscription ids and your plan.

We do not sell data, and we do not use it for advertising.

Where it lives

• Events: Google BigQuery, in the EU multi-region.
• Accounts and settings: Cloudflare D1, in the EU.
• Payments: Stripe, as the merchant of record.
• Email: Cloudflare Email, for sign-in codes and notices.

Deleting a site deletes its events. Deleting your account deletes your data, except what the law requires us to keep for billing.

Contact

Questions about privacy: privacy@crowne.io.