Privacy & GDPR - Webful | Full Transparency on Your Data

Our commitment

Webful is designed to respect your privacy and that of your visitors.

🌱

Radical minimalism

We collect only the data necessary for the service: page views, time spent, referrer (where your visitors come from). No personal data is collected.

Hosted in Europe

All your data is stored on servers in Europe (OVH France). It never leaves European territory. No transfer to the United States or other third countries.

🔒

Full anonymization

IP addresses are anonymized immediately (last octets removed). We use random session identifiers, without cookies.

📦

Your data belongs to you

Download all your data in XML anytime from your dashboard. You can also request complete deletion of your data in one click.

What data exactly?

Full transparency: here is everything we collect.

Data collected	Why	Duration
Visited page URL E.g.: /contact.php	To know which pages are visited	13 months
Time spent on page In seconds	To measure engagement	13 months
Referrer E.g.: google.com, direct	To know where your visitors come from	13 months
Device type Desktop, mobile, tablet	To optimize mobile experience	13 months
IP address (anonymized) 192.168.x.x → 192.168.0.0	To detect unique visits (session)	Immediate The full IP is never stored
Session ID (random) E.g.: abc123xyz789	To group pages of the same visit	13 months

✅

What we do NOT collect

❌ No name, surname, email of your visitors
❌ No full IP address
❌ No third-party cookies (Google, Facebook, etc.)
❌ No browser fingerprinting
❌ No cross-site browsing data

How does it work technically?

For the curious and developers.

1. A visitor arrives on your site

The Webful script (webful-tracker.js) runs in the browser. It is hosted on your servers (no external CDN).

<script src="/wp-content/plugins/webful/assets/js/webful-tracker.js"></script>

2. Anonymous session generation

A random identifier is generated in the browser (localStorage). No cookies. This ID automatically changes after 30 minutes of inactivity.

sessionId: generateRandomId() // Ex: "wbf_abc123xyz789"

3. Data transmission (HTTPS only)

Data is sent to the Webful API encrypted via HTTPS. The visitor's IP address is anonymized server-side immediately.

                                POST /api/track.php

{

  "site_id": "WBF-12345",

  "url": "/contact.php",

  "referrer": "google.com",

  "device": "desktop",

  "session_id": "wbf_abc123xyz789"

}

// IP anonymized: 192.168.45.123 → 192.168.0.0

4. Secure storage in Europe

Data is stored in a MySQL database hosted at OVH France. Encrypted connection, daily backups, restricted access.

5. Automatic deletion after 13 months

An automatic script (CRON) deletes all data older than 13 months. You can also request immediate deletion from your dashboard.

GDPR Right: Data Portability

Export all your data in XML

In compliance with GDPR, you can download all the data from your site.

What's included

✓ All page views
✓ All referrers
✓ Time spent per page
✓ Anonymized sessions
✓ Device type used
✓ SEO data (scores, analyses)
✓ Tracked conversions

Format & usage

✓ Standard XML format
✓ Compatible with Excel, LibreOffice
✓ Usable by scripts (Python, etc.)
✓ Precise timestamps
✓ Instant export (under 5 sec)
✓ No download limit

How to export your data?

Log in to your Webful Dashboard → "Settings" tab → "My data" section → Click "Download my data (XML)"

Go to my Dashboard

Your GDPR rights

You have full control over your data.

📋

Right of access

View all your data from your dashboard, anytime.

📦

Right to portability

Export your data in XML to use elsewhere.

🗑️

Right to erasure

Delete all your data in one click from settings.

✏️

Right to rectification

Correct your account information anytime.

⛔

Right to object

Disable tracking for your site in one click.

🔒

Right to restriction

Request temporary freeze of your data.

Any questions about your data or your rights?

Contact our team

Frequently asked questions

Does Webful use cookies?

No, no cookies. Webful uses the browser's localStorage to store a temporary session identifier, which is never transmitted to third parties. No third-party tracking cookies (Google, Facebook, etc.).

Do I need to display a cookie consent banner?

No, it's not required for Webful. Since we don't use any cookies and data is fully anonymized, a consent banner is not required for Webful alone. Just mention Webful in your privacy policy.

Who can access my data?

Only you. Webful never accesses your data for commercial purposes. We may only access it for technical support (with your consent) or legal obligation. Your data is never sold or shared with third parties.

How do I permanently delete my data?

Two methods: 1) In your dashboard → Settings → "Delete all my data". 2) Delete your Webful account (all associated data will be deleted within 30 days). Deletion is irreversible.

Does Webful share data with Google or Facebook?

Absolutely not. Webful does not communicate with any third-party tracking service. No integration with Google Analytics, Facebook Pixel, or any other targeted advertising service. That's precisely our ethical alternative.

How long is data retained?

Tracking data is retained for 13 months maximum (GDPR compliant), then automatically deleted. Your account data (email, site name) is retained as long as your account is active.

Respectful tracking, finally.

Join the websites that chose transparency.

Try for free Ask a question

Free for 1 month - No credit card - Cancel in one click

Privacy & Transparency