Privacy

What Ambit Signal collects, how it is protected, and wording for your privacy policy.

Collected

Data	From	Stored as
IP address	server collectors, JS tag request	never stored. Converted at ingest into a salted HMAC-SHA256 visitor key (pseudonymous), plus country / region / city from an offline database (DB-IP Lite, CC BY 4.0).
User-Agent	request	truncated string plus derived device, OS and browser class
Page path, query utm parameters, status, time	request	as is
Referrer host	request	host only
Accept-Language / browser language	request / JS tag	primary language tag
Bot identity headers (Signature-Agent, Signature)	request	agent host plus verification result
First-touch source (`ambit_src`)	JS tag, browser localStorage	AI provider, how detected (utm / referrer / direct), landing page, time, timezone, screen size, language. Sent only inside a form submission or an outcome call.
Outcomes	your server or form	type, your id, status, value, first-touch source. No names, emails or phone numbers.

No cookies. No cross-site tracking. No data is sold or shared with third parties. Nothing is sent to ad networks.

Retention

Store	Kept
Raw web server logs we host (contain IPs)	at most 30 days
Page-hit events (hashed visitor key)	13 months (395 days)
AI return-visit table (hashed key to first AI touch)	90 days
Browser `ambit_src`	in the visitor's browser until they clear site data

Self-hosted shippers (nginx, Caddy) keep their own local log: set its rotation to 7 days or less.

Consent

The JS tag honours Do Not Track: with DNT on it sends nothing and adds no form field.
data-consent="required" on the tag collects nothing until your consent banner calls window.ambitSignal.consent(true). consent(false) stops collection.
Server collectors process request metadata needed to serve and secure the site; IPs are hashed on arrival. Whether that needs consent in your jurisdiction is your call; the consent switch covers the browser side.

Deletion

The site owner can request deletion of a site's events and outcomes, or of specific outcome ids, by writing to hello@ambit.agency from the account's owner address. Because visitor IPs are never stored, Signal cannot look up a person by IP; deletion works by site, outcome id or time range.

Policy snippet (adapt to your site)

Our website keeps standard technical logs of each visit (such as your IP address, browser and device type, language, the pages you request and the site that referred you) to operate and secure the site and to understand which services, including AI assistants, send us visitors. Raw server logs are deleted within 30 days; the analysis keeps only a pseudonymous identifier derived from your IP address, never the address itself, for up to 13 months. Our website also saves a small record in your browser's local storage of how you first reached us (for example, a search engine or AI assistant), the first page you visited, and your timezone, screen size and language. It is sent to us only if you submit a form, and it is kept with your inquiry. We use Ambit Signal (ambit.agency) to process this data on our behalf; it is not sold or shared for advertising.