Privacy Policy

Last updated: September 7, 2026

This Privacy Policy explains how Ekameva Visitor Tracker ("EVT," "we," "us") collects, uses, and shares information through our website-visitor tracking service ("Service").

1. Two roles: our customers, and their website visitors

EVT is used by website owners ("Customers," "you," if you have an EVT account) to monitor traffic on their own websites. In doing so, EVT collects data about people who visit our Customers' websites ("Visitors"). It is important to understand the distinction:

• If you are a Customer (you've registered an account with us), this policy explains what we collect about you directly, and your responsibilities as the party who determines what data is collected about your own Visitors.
• If you are a Visitor to a website that uses EVT, we act as a data processor on behalf of that website's owner. We collect the data described below at their direction; they are responsible for telling you about it (e.g. in their own privacy policy) and for any consent required in your jurisdiction.

2. Information we collect about Customers

When you create an account, we collect your email address, name (optional), and a hashed password. If you subscribe to a paid plan, our payment processors (Stripe, PayPal, and/or Razorpay) handle your payment details directly - we do not store your card or bank information ourselves.

3. Information collected about website Visitors

When a Customer installs the EVT tracking script on their website, the following data may be collected about each Visitor, depending on the Customer's plan and settings:

• Network & location data: IP address, an IP-based estimated location (city/region/country), and network/ISP/hosting-provider information.
• Precise geolocation (Pro/Business plans only, and only if the Visitor's browser is asked for and grants permission): GPS coordinates, converted to a place name.
• Device & browser data: browser type, operating system, device type, screen resolution, viewport size, installed RAM/CPU core count (where exposed by the browser), color depth, time zone, language, and GPU renderer string.
• Browsing activity on that site: pages visited, time spent, referring page/source, and first-page-of-session.
• A derived fingerprint - a one-way hash of several of the above signals, used to distinguish a returning Visitor from a new one without storing anything more identifying than necessary.
• Bot-detection signals: indicators such as automation flags (e.g. navigator.webdriver), plugin counts, and interaction with an invisible "honeypot" link, used solely to score and filter out non-human traffic. We do not use these signals for any purpose beyond bot filtering.

We do not knowingly collect names, email addresses, or other directly identifying information about Visitors unless a Visitor voluntarily submits it through the Customer's own site by some other means outside of EVT.

4. How this data is used

• Delivered to the Customer as visit reports, by email and/or webhook, on the schedule they choose (immediate, hourly, daily, weekly, or monthly).
• Used to calculate aggregate statistics shown in the Customer's dashboard (e.g. visit counts, bots blocked).
• Used to detect and filter automated/bot traffic, which is the core function of the Service.
• We do not sell Visitor data, and we do not use it to build profiles for advertising purposes.

5. Third-party services we rely on

Operating EVT requires sending limited data to a small number of third-party services:

• IP geolocation lookups - a Visitor's IP address is sent to our geolocation provider to resolve an approximate location and network/ISP information.
• Reverse geocoding (Pro/Business plans) - if precise GPS coordinates are collected, they are sent to a mapping provider to convert coordinates into a place name.
• Email delivery - visit-report emails are sent via our hosting provider's mail infrastructure.
• Payment processing - Stripe, PayPal, and/or Razorpay process subscription payments for Customer accounts.

6. Data retention

Visitor data is retained according to the Customer's plan (typically 14-180 days), after which it is eligible for deletion. Customers may request earlier deletion of data associated with their own site(s) by contacting us.

7. Cookies and local storage

The EVT script uses your browser's sessionStorage (not cookies) to avoid re-counting the same browsing session multiple times and to track which pages were visited during that session. This data is cleared automatically when the browser tab/session ends and is never sent anywhere except to the Customer's own EVT account.

8. Your rights

Depending on your location, you may have rights to access, correct, or request deletion of personal data we hold. Customers can exercise these rights over their own account data by contacting us directly. Visitors who wish to exercise rights over data collected via a Customer's website should first contact that website's owner, since they control what is collected and why; we will assist Customers in fulfilling such requests where required by applicable law.

9. Children's privacy

EVT is not directed at children, and we do not knowingly collect personal information from children. The Service is intended for use by website operators monitoring their own site traffic, not by individual visitors interacting with us directly.

10. Data security

We use reasonable technical and organizational measures - including encrypted password storage, domain-validated API keys, and access controls - to protect the data we hold. No system is perfectly secure, and we cannot guarantee absolute security.

11. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

12. Contact

Questions about this policy can be sent to privacy@ekameva.in.

This page is provided as a general template reflecting EVT's actual features and data flows. It is not a substitute for legal advice; please have it reviewed by a qualified professional before relying on it, particularly regarding GDPR, CCPA, or other region-specific obligations relevant to where your Customers and their Visitors are located.