Privacy and GDPR

Not legal advice

This page describes how Eureka works. Have your DPO or lawyer validate your setup (legal basis, CNIL exemption, data processing agreement).

What Eureka never stores

• Full IP addresses. The collector uses the IP in memory for geography and bot verification, then keeps only a truncated (/24 for IPv4, /48 for IPv6) and hashed form, with a salt that changes every day.
• Form values. The tag records form interactions (start, submit, abandon), never what is typed.
• Sensitive URL parameters. email, mail, tel, phone, token, password, pwd (configurable) are removed from URLs, referrers and links.
• Personal text in clicks. Element text is truncated to 100 characters, emails and long numbers are masked, and elements marked data-ah-mask are replaced by ***.
• Raw user IDs. IDs passed to eureka('identify', …) are hashed (SHA-256) in the browser.

Consent modes

Mode	When to use it
full	The visitor gave analytics consent: first-party cookie (13 months maximum), full measurement
cookieless	No consent yet: nothing stored on the device, a visitor ID that changes daily, no cross-day tracking
none	Refusal with a strict setup: anonymous counts only

Details and CMP integrations: Consent and CMPs.

CNIL exemption

The CNIL (French data protection authority) allows audience measurement without consent under conditions. With the property option CNIL exemption (Admin → Properties → Consent) in cookieless mode, Eureka limits processing to audience measurement of your site:

• no cross-referencing with other processing, no transfer to third parties, no cross-site tracking, no advertising profiling;
• truncated and hashed IPs, identifiers living at most 13 months, data kept at most 25 months;
• an opt-out mechanism (eureka('optout')) and information text you can include in your privacy policy.

Data subject rights

• Access: export every event of a visitor or user ID (Admin → Privacy, or GET /v1/properties/{pid}/subjects/{id}).
• Erasure: delete them everywhere, including the session and segment tables (DELETE /v1/properties/{pid}/subjects/{id}). Every request is recorded in the audit log.
• Objection: eureka('optout').

Retention and location

Data is kept according to your plan (3, 14 or 25 months) and deleted automatically after that. Data is hosted in the European Union by default, with no transfer outside the EU for EU properties; the Scale plan lets you choose the region.

Agents and personal data

An AI agent acting for a user shares that user's browser, so the user's consent applies to their agent. Indexing bots are not people: there is no consent to collect, and their hits contain no personal data once the IP is truncated.