Privacy & GDPR
What Invoker stores about your visitors, and the controls you have over it.
This page explains how the product works in practice. It isn't legal advice; the binding documents are our Privacy Policy, Cookie Policy, DPA and Terms.
Does Invoker use cookies?
Not on your website. The tracking script doesn't set cookies. It stores a random visitor ID (invoker_cid) and a session ID (invoker_session, 30-minute inactivity timeout) in your site's localStorage. If storage is blocked, it falls back to a short hash of non-identifying browser properties (screen size, timezone, language, CPU cores, platform).
Our API only sets its own first-party inv_visitor/inv_sid cookies on same-origin requests to our domain, which never happens on your site. There are no third-party cookies and no cross-site tracking. The Cookie Policy lists every key.
Do I need a consent banner?
It depends on where you and your visitors are. Storing an identifier in localStorage can require consent under ePrivacy rules in some jurisdictions, even without cookies. If you decide you need consent, load the script only after the visitor agrees — there's an example in the JavaScript SDK docs. We can't give legal advice, so check with your own counsel.
What does the script send?
The page URL (host and path), page title, referrer, UTM and a few common campaign parameters (ref, gclid, msclkid and similar), screen and viewport size, the visitor and session IDs above, and any events, goals or revenue you send yourself. Our server also sees the request's IP address and user agent. The full list is in the Tracking Script docs.
How are IP addresses handled?
The IP address is used to look up an approximate location (country, region, city) and to apply your IP and country blocks. Location lookups use a DB-IP database hosted on our own servers, so IP addresses are never sent to a third-party geolocation service.
The IP address is processed only while the hit is handled and then discarded. It is never stored — not in full, not truncated and not hashed — so there is no IP anonymisation setting to turn on. Unique visitors are counted with the random first-party IDs described above, not with IP addresses.
Which geolocation database do you use?
IP geolocation by DB-IP (DB-IP Lite, licensed under CC BY 4.0). The database is refreshed monthly. Location is approximate and can be wrong for VPN, proxy, iCloud Private Relay and mobile carrier traffic.
Do you honour Do Not Track?
If you want to. Add data-honor-dnt="true" to the script so browsers with DNT enabled send nothing, and/or turn on Respect Do Not Track in Site → Settings → Privacy & Tracking so the server drops requests carrying DNT: 1. Both are off by default.
Can visitors opt out?
Yes. Calling window.invoker.blockTrackingForMe() on your site stores an opt-out flag in that browser's localStorage; enableTrackingForMe() removes it. You can wire these to a link or button in your own privacy page.
Do you build profiles or sell data?
No. Visitor IDs are random and specific to your site, so a visitor on your site isn't linked to the same person elsewhere. Analytics data isn't sold or used for advertising.
What should I avoid sending?
Don't put personal data (names, email addresses, phone numbers, account numbers) in page URLs, page titles, event names or event properties. Use the Exclude Query Parameters site setting to strip parameters such as tokens or email addresses from tracked URLs.
Where is the data stored and for how long?
Retention depends on your plan — see Data retention. Hosting location and our sub-processors are listed in the Privacy Policy.
Is there a Data Processing Agreement?
Yes. Our Data Processing Agreement (GDPR Article 28) applies to every customer. If you need a countersigned copy, contact us.
How do I export or delete data?
Export analytics as CSV or JSON from the dashboard or API (Data export).
To erase a site's stored analytics, data about a specific visitor, or your whole account, or to handle a data subject request from one of your visitors, contact us. Deleting a site in the dashboard stops tracking and removes it from your account; ask us if you also need its stored data erased immediately rather than at the end of your retention period.