Legal & privacy
Visitor data policy
What wayfold processes on customer websites, how short-lived sessions work and where the limits lie.
Last updated: 11 October 2026
Purpose and responsibility
minddraft AG provides wayfold to measure website use and improve content, navigation and technical quality. The website operator chooses the enabled features and remains responsible for their use. Visitor data is not sold, used for advertising or combined into a persistent cross-site personal profile.
Data we process
Basic analytics captures scrubbed paths, pageviews, coarse elapsed times and order within a visit. This includes the referring origin, allowed campaign values, browser family and major version, operating system family, device class and country. IP addresses and full user agents are processed transiently to derive these values, resolve short-lived sessions and prevent abuse. They are not retained as raw values in visitor data or analytics logs.
Excluded content
Public analytics does not capture names, email addresses, account identifiers, form contents, keystrokes, DOM text, screenshots or complete mouse trails. There is no geolocation below country level or recognition across websites or devices. Arbitrary URL parameters are removed; only allowed campaign values remain. Customer-provided paths and event values are also filtered for common personal-data patterns.
Connecting events within a visit
A loaded page creates a random document identifier in memory for transmission and timing. It is not a stored browser visitor identifier. On the server, short-lived rotating mappings connect events for the same website. A new session starts after 30 minutes of inactivity or at most eight hours. A later visit is not attached to a persistent personal profile. Ending this mapping does not immediately delete the recorded journey: its retention window is 365 days. Shared networks can merge visits and network changes can split a visit. Sessions are therefore not an exact count of people. Short-lived mappings and session data are not automatically treated as anonymous for legal assessment.
Estimated daily reach
A separate statistical structure estimates daily reach for each website. It contains no retrievable member list or stored visitor hashes. The estimate has disclosed uncertainty and does not allow recognition across days or websites.
Optional features
Scroll thresholds, form actions and custom events are collected according to website configuration. Form actions transmit a scrubbed form reference, not inputs. Custom events may contain bounded, scrubbed values. Heatmaps transmit locally counted coarse grid cells for clicks, movement, scroll reach and possible interaction problems. They contain neither chronological mouse trails nor session recordings. Performance signals are placed in fixed measurement buckets before transmission; outcome comparisons show only cohorts of at least five sessions. Goals, funnels and journeys analyse the allowed events.
Cookies and browser storage
Public analytics sets no cookies and stores no visitor or session identifier in localStorage or sessionStorage. When a person deliberately opts out, the optional privacy panel stores only that website-specific decision and its date in localStorage for up to 180 days. The preference is not transmitted or used to link visits.
Retention periods
Session-linked events, journey details and associated measurements have a retention window of 365 days from the last server-side receipt. Scheduled maintenance reduces expired sessions to daily statistics and removes session data. Daily statistics are retained for up to 730 days and technical receipts for seven days. Deleting a website removes its associated analytics data from the active database. Residual copies in daily database backups expire within the rolling backup window of approximately seven days.
Information and opt-out
The website operator can provide a link to our privacy panel, where analytics can be disabled and resumed. Global Privacy Control is respected. An external consent manager can additionally block collection until permission is granted. wayfold itself does not show a proactive consent banner. Whether consent is required in a particular deployment depends on purpose, configuration and applicable law.
Authenticated Test Mode is separate
An authorized team member deliberately activates Test Mode after login. Its temporary credential and control positions are retained in sessionStorage for the tab. Public visitor analytics does not start in this mode. Pins and comments are deliberately authored team data with attribution, not linked to visitor sessions. Ending Test Mode removes access. Saved issues remain available to the team until they or the website are deleted. The privacy policy explains the details. Authorized testers may explicitly enable screenshots in Test Mode and share the tested tab through their browser. Placing a pin prepares a still image. Before saving, they can remove the image or redact areas. Only saving uploads the image to wayfold. It is stored privately on the issue, served only after a fresh property-permission check, and deleted with the issue or property. Captures may contain visible personal information; the responsible team reviews it before sharing. No video or audio recordings are stored, and images are never linked to visitor analytics.
Website operator configuration
Do not put personal or sensitive content in paths, campaign values, event names or event properties. Automated scrubbing reduces mistakes but cannot recognize every possible input. Features and legal basis must fit the actual analysis purpose. Data from other services is not used to enrich individual visitor sessions.
Wording for your privacy notice
Draft for adaptation: before use, add your enabled features, legal basis and, where provided, the actual opt-out link. These details depend on your deployment. We use wayfold by minddraft AG, Säntisstrasse 12 6345 Neuheim Schweiz, for statistical analysis and improvement of our website. The application servers are hosted by Hetzner in Germany; the production database is hosted by Supabase in Zurich, Switzerland. Visitor analytics uses no cookies and stores no visitor identifier in your browser. It processes scrubbed pageviews, referrer and campaign values and coarse device, browser and country information. IP addresses and user agents are processed transiently and are not stored as raw analytics values. Events may be connected within a short-lived visit; there is no persistent or cross-site recognition. Session data is cleared after its 365-day retention window and daily statistics are retained for up to 730 days. A deliberate opt-out is stored locally as a preference for up to 180 days. Further information is available in wayfold’s visitor data policy.