Privacy Policy

Last updated: September 2025

1. Data Controller

QLYX Analytics is the data controller for the personal data collected through our analytics service. We are committed to protecting your privacy and ensuring the security of your personal information.

2. Information We Collect

2.1 Automatically Collected Data

When you visit a website using QLYX Analytics, we may collect the following information:

• IP Address: We collect your IP address for analytics purposes. IP addresses are anonymized by default.
• Browser Information: Browser type, version, and language settings
• Device Information: Device type (desktop, mobile, tablet) and operating system
• Location Data: Country and city (derived from IP address)
• Website Usage: Pages visited, time spent, referring websites
• Session Data: Session identifiers for tracking user journeys
• Organization Data: ISP and organization information (for bot detection)

2.2 Data We Do NOT Collect

• Personal identification information (name, email, phone number)
• Financial information
• Sensitive personal data
• Content of communications

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Legitimate Interest: For website analytics and performance monitoring
• Consent: For non-essential cookies and advanced analytics features
• Contractual Necessity: For providing analytics services to website owners

4. How We Use Your Data

We use the collected data for the following purposes:

• Website traffic analysis and reporting
• Bot detection and filtering
• Performance monitoring and optimization
• Security and fraud prevention
• Service improvement and development

5. Data Sharing and Third Parties

We do not sell, trade, or rent your personal data to third parties. We may share data only in the following circumstances:

• With website owners who use our analytics service (anonymized data only)
• With service providers who assist in our operations (under strict confidentiality agreements)
• When required by law or legal process
• To protect our rights, property, or safety

6. Data Retention

We retain your data for the following periods:

• Analytics Data: Up to 2 years for historical analysis
• Session Data: Up to 30 days for session tracking
• Consent Records: Until consent is withdrawn or expires

Data is automatically deleted after the retention period expires.

7. Your Rights Under GDPR

As a data subject, you have the following rights (learn more):

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time

8. Cookies and Tracking Technologies

We use the following types of cookies (what are cookies?):

• Essential Cookies: Necessary for website functionality (always active)
• Analytics Cookies: For website traffic analysis (requires consent)
• Preference Cookies: For remembering your settings (requires consent)

You can manage your cookie preferences through our consent banner or your browser settings. See our Cookie Policy for more details.

9. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication
• Secure data centers and infrastructure

10. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure adequate protection through:

• Adequacy decisions by the European Commission
• Standard contractual clauses
• Binding corporate rules
• Certification schemes

11. Children's Privacy

Our service is not intended for children under 16. We do not knowingly collect personal data from children under 16. If we become aware of such collection, we will delete the data immediately.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending email notifications to registered users
• Displaying a notice on our service

13. Contact Information

14. Supervisory Authority

You have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not handled your personal data in accordance with applicable law. For more information, visit the European Data Protection Board.