CINXE.COM

<!DOCTYPE html> <html lang="en" class="h-full"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1"> <title>Plausible Analytics Data Processing Agreement | Plausible Analytics</title> <meta name="generator" content="Jekyll v3.9.2"/> <meta property="og:title" content="Plausible Analytics Data Processing Agreement"/> <meta property="og:locale" content="en_US"/> <meta name="description" content="Plausible Analytics Data Processing Agreement (DPA) that you agree to when you sign up for a Plausible Analytics product."/> <meta property="og:description" content="Plausible Analytics Data Processing Agreement (DPA) that you agree to when you sign up for a Plausible Analytics product."/> <link rel="canonical" href="https://plausible.io/dpa"/> <meta property="og:url" content="https://plausible.io/dpa"/> <meta property="og:site_name" content="Plausible Analytics"/> <meta property="og:image" content="https://plausible.io/assets/images/plausible_promo.jpg"/> <meta property="og:type" content="website"/> <meta name="twitter:card" content="summary_large_image"/> <meta property="twitter:image" content="https://plausible.io/assets/images/plausible_promo.jpg"/> <meta property="twitter:title" content="Plausible Analytics Data Processing Agreement"/> <meta name="twitter:site" content="@ukutaht"/> <script type="application/ld+json"> {"@context":"https://schema.org","@type":"WebPage","description":"Plausible Analytics Data Processing Agreement (DPA) that you agree to when you sign up for a Plausible Analytics product.","headline":"Plausible Analytics Data Processing Agreement","image":"https://plausible.io/assets/images/plausible_promo.jpg","url":"https://plausible.io/dpa"}</script> <link rel="apple-touch-icon" sizes="180x180" href="/assets/images/icon/apple-touch-icon.png"/> <link rel="icon" type="image/png" sizes="32x32" href="/assets/images/icon/favicon-16x16.png"/> <link rel="icon" type="image/png" sizes="16x16" href="/assets/images/icon/favicon-32x32.png"/> <link rel="stylesheet" href="/assets/css/style.css?v=1743500318"> <link rel="preload" href="/assets/css/tooltip.css?v=1743500318" as="style" onload="this.onload=null;this.rel='stylesheet'"> <noscript><link rel="stylesheet" href="/assets/css/tooltip.css?v=1743500318;"></noscript> <script>document.cookie.includes("logged_in=true")&&"https://plausible.io/"==window.location.href&&(window.location.pathname="/sites");</script> <script defer data-domain="plausible.io" src="https://plausible.io/js/script.manual.js"></script> <script>window.plausible=window.plausible||function(){(window.plausible.q=window.plausible.q||[]).push(arguments)};var props={browser_language:navigator.language||navigator.userLanguage};window.plausible("pageview",{props:props}),window.addEventListener("pageshow",function(a){a.persisted&&window.plausible("pageview",{props:props})});</script><link type="application/atom+xml" rel="alternate" href="https://plausible.io/blog/feed.xml" title="Plausible Analytics"/></head> <body class="flex flex-col h-full bg-gray-50"><nav x-data="{mobileNav: false}" class="relative py-8 z-10"> <div class="container"> <nav class="relative flex items-center justify-between sm:h-10 md:justify-center"> <div class="flex items-center flex-1 md:absolute md:inset-y-0 md:left-0"> <div class="flex items-center justify-between w-full md:w-auto"> <a href="/"><img class="h-8 w-auto sm:h-10 -mt-2" src="/assets/images/icon/plausible_logo.svg" alt="Plausible logo"/></a> <div class="-mr-2 flex items-center md:hidden"> <button @click="mobileNav = true" type="button" class="inline-flex items-center justify-center p-2 rounded-md text-gray-400 hover:text-gray-500 hover:bg-gray-100 focus:outline-none focus:bg-gray-100 focus:text-gray-500 transition duration-150 ease-in-out"> <svg class="h-6 w-6" stroke="currentColor" fill="none" viewBox="0 0 24 24"> <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M4 6h16M4 12h16M4 18h16"/> </svg> </button> </div> </div> </div> <div class="hidden md:block"> <div x-data="{open: false}" class="relative inline-block text-left"> <div> <span @click="open = !open" class="cursor-pointer inline-flex justify-center font-medium text-gray-500 hover:text-gray-900 focus:outline-none focus:text-gray-900 transition duration-150 ease-in-out"> Why Plausible <svg class="-mr-1 h-5 w-5" style="transform: translateY(3px);" fill="currentColor" viewBox="0 0 20 20"> <path fill-rule="evenodd" d="M5.293 7.293a1 1 0 011.414 0L10 10.586l3.293-3.293a1 1 0 111.414 1.414l-4 4a1 1 0 01-1.414 0l-4-4a1 1 0 010-1.414z" clip-rule="evenodd"/> </svg> </span> </div> <div x-show="open" @click.away="open = false" style="display: none;" x-transition:enter="transition ease-out duration-200" x-transition:enter-start="opacity-0 translate-y-1" x-transition:enter-end="opacity-100 translate-y-0" x-transition:leave="transition ease-in duration-150" x-transition:leave-start="opacity-100 translate-y-0" x-transition:leave-end="opacity-0 translate-y-1" class="absolute left-1/2 transform -translate-x-1/2 mt-3 px-2 w-screen max-w-md sm:px-0"> <div class="rounded-lg shadow-lg"> <div class="rounded-lg shadow-xs overflow-hidden"> <div class="z-20 relative grid gap-6 bg-white px-5 py-6 sm:gap-8 sm:p-8"> <a href="/simple-web-analytics" class="-m-3 p-3 flex items-start space-x-4 rounded-lg hover:bg-gray-50 transition ease-in-out duration-150"> <svg class="flex-shrink-0 h-6 w-6 text-indigo-600" fill="none" stroke="currentColor" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" viewBox="0 0 24 24"> <path d="M9 19V13C9 11.8954 8.10457 11 7 11H5C3.89543 11 3 11.8954 3 13V19C3 20.1046 3.89543 21 5 21H7C8.10457 21 9 20.1046 9 19ZM9 19V9C9 7.89543 9.89543 7 11 7H13C14.1046 7 15 7.89543 15 9V19M9 19C9 20.1046 9.89543 21 11 21H13C14.1046 21 15 20.1046 15 19M15 19V5C15 3.89543 15.8954 3 17 3H19C20.1046 3 21 3.89543 21 5V19C21 20.1046 20.1046 21 19 21H17C15.8954 21 15 20.1046 15 19Z"/> </svg> <div class="space-y-1"> <p class="text-base leading-6 font-medium text-gray-900"> Intuitive Dashboard </p> <p class="text-sm leading-5 text-gray-500"> Get all the important stats on one single page. No training necessary. </p> </div> </a> <a href="/lightweight-web-analytics" class="-m-3 p-3 flex items-start space-x-4 rounded-lg hover:bg-gray-50 transition ease-in-out duration-150"> <svg class="flex-shrink-0 h-6 w-6 text-indigo-600" fill="none" stroke="currentColor" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" viewBox="0 0 24 24"> <path d="M13 10V3L4 14H11L11 21L20 10L13 10Z"> </svg> <div class="space-y-1"> <p class="text-base leading-6 font-medium text-gray-900"> Lightweight Script </p> <p class="text-sm leading-5 text-gray-500"> Bloated analytics scripts can slow down your website. Plausible script is lightweight and fast. </p> </div> </a> <a href="/privacy-focused-web-analytics" class="-m-3 p-3 flex items-start space-x-4 rounded-lg hover:bg-gray-50 transition ease-in-out duration-150"> <svg class="flex-shrink-0 h-6 w-6 text-indigo-600" fill="none" stroke="currentColor" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" viewBox="0 0 24 24"> <path d="M9 12l2 2 4-4m5.618-4.016A11.955 11.955 0 0112 2.944a11.955 11.955 0 01-8.618 3.04A12.02 12.02 0 003 9c0 5.591 3.824 10.29 9 11.622 5.176-1.332 9-6.03 9-11.622 0-1.042-.133-2.052-.382-3.016z"/> </svg> <div class="space-y-1"> <p class="text-base leading-6 font-medium text-gray-900"> Privacy Focused </p> <p class="text-sm leading-5 text-gray-500"> Built with privacy of your visitors in mind. No need to annoy them with a cookie/GDPR consent banner. </p> </div> </a> <a href="/open-source-website-analytics" class="-m-3 p-3 flex items-start space-x-4 rounded-lg hover:bg-gray-50 transition ease-in-out duration-150"> <svg class="flex-shrink-0 h-6 w-6 text-indigo-600" fill="none" stroke="currentColor" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" viewBox="0 0 24 24"> <path d="M10 20L14 4M18 8L22 12L18 16M6 16L2 12L6 8"> </svg> <div class="space-y-1"> <p class="text-base leading-6 font-medium text-gray-900"> Open Source </p> <p class="text-sm leading-5 text-gray-500"> Built openly on GitHub, released under the AGPL license and can be self-hosted too. </p> </div> </a> </div> <div class="px-5 py-5 bg-gray-50 space-y-5 sm:px-8 sm:py-8"> <div class="flex justify-between"> <div class="space-y-4"> <h3 class="text-sm leading-5 tracking-wide font-medium text-gray-500 uppercase"> Industry </h3> <ul class="space-y-4"> <li class="text-base leading-6 truncate"> <a href="/for-ecommerce-saas" class="font-medium text-gray-900 hover:text-gray-700 transition ease-in-out duration-150"> For startups </a> </li> <li class="text-base leading-6 truncate"> <a href="/for-freelancers-agencies" class="font-medium text-gray-900 hover:text-gray-700 transition ease-in-out duration-150"> For agencies </a> </li> <li class="text-base leading-6 truncate"> <a href="/for-bloggers-creators" class="font-medium text-gray-900 hover:text-gray-700 transition ease-in-out duration-150"> For creators </a> </li> <li class="text-base leading-6 truncate"> <a href="/white-label-web-analytics" class="font-medium text-gray-900 hover:text-gray-700 transition ease-in-out duration-150"> White label </a> </li> </ul> </div> <div class="space-y-4"> <h3 class="text-sm leading-5 tracking-wide font-medium text-gray-500 uppercase"> Comparisons </h3> <ul class="space-y-4"> <li class="text-base leading-6 truncate"> <a href="/vs-google-analytics" class="font-medium text-gray-900 hover:text-gray-700 transition ease-in-out duration-150"> vs Google Analytics </a> </li> <li class="text-base leading-6 truncate"> <a href="/vs-matomo" class="font-medium text-gray-900 hover:text-gray-700 transition ease-in-out duration-150"> vs Matomo </a> </li> <li class="text-base leading-6 truncate"> <a href="/vs-cloudflare-web-analytics" class="font-medium text-gray-900 hover:text-gray-700 transition ease-in-out duration-150"> vs Cloudflare </a> </li> </ul> </div> </div> </div> </div> </div> </div> </div> <div x-data="{open: false}" class="relative inline-block text-left ml-8"> <div> <span @click="open = !open" class="cursor-pointer inline-flex justify-center font-medium text-gray-500 hover:text-gray-900 focus:outline-none focus:text-gray-900 transition duration-150 ease-in-out"> Community <svg class="-mr-1 h-5 w-5" style="transform: translateY(3px);" fill="currentColor" viewBox="0 0 20 20"> <path fill-rule="evenodd" d="M5.293 7.293a1 1 0 011.414 0L10 10.586l3.293-3.293a1 1 0 111.414 1.414l-4 4a1 1 0 01-1.414 0l-4-4a1 1 0 010-1.414z" clip-rule="evenodd"/> </svg> </span> </div> <div x-show="open" @click.away="open = false" style="display: none;" x-transition:enter="transition ease-out duration-200" x-transition:enter-start="opacity-0 translate-y-1" x-transition:enter-end="opacity-100 translate-y-0" x-transition:leave="transition ease-in duration-150" x-transition:leave-start="opacity-100 translate-y-0" x-transition:leave-end="opacity-0 translate-y-1" class="absolute left-1/2 transform -translate-x-1/2 mt-3 px-2 w-screen max-w-md sm:px-0"> <div class="rounded-lg shadow-lg"> <div class="rounded-lg shadow-xs overflow-hidden"> <div class="z-20 relative grid gap-6 bg-white px-5 py-6 sm:gap-8 sm:p-8"> <a href="/blog" class="-m-3 p-3 flex items-start space-x-4 rounded-lg hover:bg-gray-50 transition ease-in-out duration-150"> <div class="space-y-1"> <p class="text-base leading-6 font-medium text-gray-900"> Blog </p> <p class="text-sm leading-5 text-gray-500"> Stories about privacy, web analytics, and building a financially sustainable open source project. </p> </div> </a> <a href="https://plausible.io/docs" class="-m-3 p-3 flex items-start space-x-4 rounded-lg hover:bg-gray-50 transition ease-in-out duration-150"> <div class="space-y-1"> <p class="text-base leading-6 font-medium text-gray-900"> Documentation </p> <p class="text-sm leading-5 text-gray-500"> Everything you need to know about getting up and running with Plausible. </p> </div> </a> <a href="https://github.com/plausible/analytics" class="-m-3 p-3 flex items-start space-x-4 rounded-lg hover:bg-gray-50 transition ease-in-out duration-150"> <div class="space-y-1"> <p class="text-base leading-6 font-medium text-gray-900"> GitHub </p> <p class="text-sm leading-5 text-gray-500"> Follow the development. Inspect and review the source code to verify that our actions match with our words. </p> </div> </a> <a href="https://plausible.io/changelog" class="-m-3 p-3 flex items-start space-x-4 rounded-lg hover:bg-gray-50 transition ease-in-out duration-150"> <div class="space-y-1"> <p class="text-base leading-6 font-medium text-gray-900"> Updates </p> <p class="text-sm leading-5 text-gray-500"> What's new in Plausible? Here we list major new features for a quick overview. </p> </div> </a> </div> <div class="px-5 py-5 bg-gray-50 sm:px-8 sm:py-8"> <h3 class="text-sm font-medium text-gray-600"> Follow us on <a href="https://twitter.com/PlausibleHQ" class="text-blue-500">Twitter</a>, <a href="https://fosstodon.org/@plausible" class="text-blue-500">Mastodon</a> or <a href="https://www.linkedin.com/company/plausible-analytics/" class="text-blue-500">LinkedIn</a> for more </h3> </div> </div> </div> </div> </div> <a href="/#pricing" class="ml-8 font-medium text-gray-500 hover:text-gray-900 focus:outline-none focus:text-gray-900 transition duration-150 ease-in-out">Pricing</a> </div> <div class="hidden md:absolute md:flex md:items-center md:justify-end md:inset-y-0 md:right-0"> <ul class="flex" x-show="!document.cookie.includes('logged_in=true')"> <li> <div class="inline-flex"> <a href="/login" class="font-medium text-gray-500 hover:text-gray-900 focus:outline-none focus:text-gray-900 transition duration-150 ease-in-out">Login</a> </div> <div class="hidden lg:inline-flex rounded-md shadow ml-6"> <a href="/register" class="inline-flex items-center justify-center px-5 py-2 border border-transparent text-base leading-6 font-medium rounded-md text-white bg-indigo-600 hover:bg-indigo-500 focus:outline-none focus:shadow-outline transition duration-150 ease-in-out">Start free trial</a> </div> </li> </ul> <div class="inline-flex rounded-md shadow ml-6" style="display: none;" x-show="document.cookie.includes('logged_in=true')"> <a href="/sites" class="inline-flex items-center justify-center px-5 py-2 border border-transparent text-base leading-6 font-medium rounded-md text-white bg-indigo-600 hover:bg-indigo-500 focus:outline-none focus:shadow-outline transition duration-150 ease-in-out">My dashboard</a> </div> </div> </nav> </div> <div x-show="mobileNav" style="display: none;" class="absolute top-0 inset-x-0 p-2 md:hidden"> <div class="rounded-lg shadow-md transition transform origin-top-right" x-show="open" x-transition:enter="duration-150 ease-out" x-transition:enter-start="opacity-0 scale-95" x-transition:enter-end="opacity-100 scale-100" x-transition:leave="duration-100 ease-in" x-transition:leave-start="opacity-100 scale-100" x-transition:leave-end="opacity-0 scale-95"> <div class="rounded-lg bg-white shadow-xs overflow-hidden"> <div class="px-5 pt-4 flex items-center justify-between"> <div> <img class="h-8 w-auto" src="/assets/images/icon/plausible_logo.svg" alt=""/> </div> <div class="-mr-2"> <button @click="mobileNav = false" type="button" class="inline-flex items-center justify-center p-2 rounded-md text-gray-400 hover:text-gray-500 hover:bg-gray-100 focus:outline-none focus:bg-gray-100 focus:text-gray-500 transition duration-150 ease-in-out"> <svg class="h-6 w-6" stroke="currentColor" fill="none" viewBox="0 0 24 24"> <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M6 18L18 6M6 6l12 12"/> </svg> </button> </div> </div> <div class="px-2 pt-2 pb-3"> <span class="block px-3 py-2 rounded-md text-base font-medium text-gray-700">Why Plausible</span> <a href="/simple-web-analytics" class="ml-2 mt-1 block px-3 py-2 rounded-md text-base font-medium text-gray-700 hover:text-gray-900 hover:bg-gray-50 focus:outline-none focus:text-gray-900 focus:bg-gray-50 transition duration-150 ease-in-out">- Simple metrics</a> <a href="/lightweight-web-analytics" class="ml-2 mt-1 block px-3 py-2 rounded-md text-base font-medium text-gray-700 hover:text-gray-900 hover:bg-gray-50 focus:outline-none focus:text-gray-900 focus:bg-gray-50 transition duration-150 ease-in-out">- Lightweight script</a> <a href="/data-policy" class="ml-2 mt-1 block px-3 py-2 rounded-md text-base font-medium text-gray-700 hover:text-gray-900 hover:bg-gray-50 focus:outline-none focus:text-gray-900 focus:bg-gray-50 transition duration-150 ease-in-out">- GDPR/CCPA Compliant</a> <a href="/open-source-website-analytics" class="ml-2 mt-1 block px-3 py-2 rounded-md text-base font-medium text-gray-700 hover:text-gray-900 hover:bg-gray-50 focus:outline-none focus:text-gray-900 focus:bg-gray-50 transition duration-150 ease-in-out">- Open source</a> <span class="block px-3 py-2 rounded-md text-base font-medium text-gray-700">Industry</span> <a href="/for-ecommerce-saas" class="ml-2 mt-1 block px-3 py-2 rounded-md text-base font-medium text-gray-700 hover:text-gray-900 hover:bg-gray-50 focus:outline-none focus:text-gray-900 focus:bg-gray-50 transition duration-150 ease-in-out">- For startups</a> <a href="/for-bloggers-creators" class="ml-2 mt-1 block px-3 py-2 rounded-md text-base font-medium text-gray-700 hover:text-gray-900 hover:bg-gray-50 focus:outline-none focus:text-gray-900 focus:bg-gray-50 transition duration-150 ease-in-out">- For bloggers</a> <a href="/for-freelancers-agencies" class="ml-2 mt-1 block px-3 py-2 rounded-md text-base font-medium text-gray-700 hover:text-gray-900 hover:bg-gray-50 focus:outline-none focus:text-gray-900 focus:bg-gray-50 transition duration-150 ease-in-out">- For freelancers</a> <span class="block px-3 py-2 rounded-md text-base font-medium text-gray-700">Comparisons</span> <a href="/vs-google-analytics" class="ml-2 mt-1 block px-3 py-2 rounded-md text-base font-medium text-gray-700 hover:text-gray-900 hover:bg-gray-50 focus:outline-none focus:text-gray-900 focus:bg-gray-50 transition duration-150 ease-in-out">- Google Analytics alternative</a> <a href="/vs-matomo" class="ml-2 mt-1 block px-3 py-2 rounded-md text-base font-medium text-gray-700 hover:text-gray-900 hover:bg-gray-50 focus:outline-none focus:text-gray-900 focus:bg-gray-50 transition duration-150 ease-in-out">- Matomo alternative</a> <a href="/vs-cloudflare-web-analytics" class="ml-2 mt-1 block px-3 py-2 rounded-md text-base font-medium text-gray-700 hover:text-gray-900 hover:bg-gray-50 focus:outline-none focus:text-gray-900 focus:bg-gray-50 transition duration-150 ease-in-out">- Cloudflare alternative</a> <span class="block px-3 py-2 rounded-md text-base font-medium text-gray-700">Community</span> <a href="/blog" class="ml-2 mt-1 block px-3 py-2 rounded-md text-base font-medium text-gray-700 hover:text-gray-900 hover:bg-gray-50 focus:outline-none focus:text-gray-900 focus:bg-gray-50 transition duration-150 ease-in-out">- Blog</a> <a href="https://plausible.io/docs" class="ml-2 mt-1 block px-3 py-2 rounded-md text-base font-medium text-gray-700 hover:text-gray-900 hover:bg-gray-50 focus:outline-none focus:text-gray-900 focus:bg-gray-50 transition duration-150 ease-in-out">- Documentation</a> <a href="https://github.com/plausible/analytics" class="ml-2 mt-1 block px-3 py-2 rounded-md text-base font-medium text-gray-700 hover:text-gray-900 hover:bg-gray-50 focus:outline-none focus:text-gray-900 focus:bg-gray-50 transition duration-150 ease-in-out">- GitHub Repo</a> <a href="https://plausible.io/roadmap" class="ml-2 mt-1 block px-3 py-2 rounded-md text-base font-medium text-gray-700 hover:text-gray-900 hover:bg-gray-50 focus:outline-none focus:text-gray-900 focus:bg-gray-50 transition duration-150 ease-in-out">- Public Roadmap</a> <a href="https://plausible.io/forum" class="ml-2 mt-1 block px-3 py-2 rounded-md text-base font-medium text-gray-700 hover:text-gray-900 hover:bg-gray-50 focus:outline-none focus:text-gray-900 focus:bg-gray-50 transition duration-150 ease-in-out">- Forum</a> <a href="/#pricing" class="mt-1 block px-3 py-2 rounded-md text-base font-medium text-gray-700 hover:text-gray-900 hover:bg-gray-50 focus:outline-none focus:text-gray-900 focus:bg-gray-50 transition duration-150 ease-in-out">Pricing</a> </div> <div x-show="!document.cookie.includes('logged_in=true')"> <a href="/register" class="block w-full px-5 py-3 text-center font-medium text-indigo-600 bg-gray-50 hover:bg-gray-100 hover:text-indigo-700 focus:outline-none focus:bg-gray-100 focus:text-indigo-700 transition duration-150 ease-in-out"> Start free trial </a> <a href="/login" class="border-t border-gray-200 block w-full px-5 py-3 text-center font-medium text-indigo-600 bg-gray-50 hover:bg-gray-100 hover:text-indigo-700 focus:outline-none focus:bg-gray-100 focus:text-indigo-700 transition duration-150 ease-in-out"> Log in </a> </div> <div style="display: none;" x-show="document.cookie.includes('logged_in=true')"> <a href="/sites" class="block w-full px-5 py-3 text-center font-medium text-indigo-600 bg-gray-50 hover:bg-gray-100 hover:text-indigo-700 focus:outline-none focus:bg-gray-100 focus:text-indigo-700 transition duration-150 ease-in-out"> My dashboard </a> </div> </div> </div> </div> </nav> <main class="flex-1"> <article class="container max-w-screen-sm my-12 md:my-16"> <header> <h1 class="text-3xl tracking-tight leading-10 font-extrabold text-gray-900 sm:text-4xl sm:leading-none"> Plausible Analytics Data Processing Agreement </h1> </header> <div class="prose mt-8"> <p>Thank you for using Plausible Analytics!</p> <p>Plausible Analytics is a European company and our data infrastructure is based in Germany covered by the EU’s strong data privacy laws. Processing and storing data in a secure, fair, and transparent way is extremely important to us.</p> <p>This Data Processing Agreement (“DPA”) is an addendum to the <a href="https://plausible.io/terms">Terms of Service</a> between Plausible Analytics and the customer.</p> <p>If you are accepting this DPA on behalf of your customer, you warrant that: (a) you have full legal authority to bind your customer to this DPA; (b) you have read and understand this DPA; and (c) you agree, on behalf of your customer, to this DPA.</p> <p>These service terms incorporate the Plausible Analytics Data Processing Agreement” (“DPA”), when the General Data Protection regulation (“GDPR”) applies to your use of Plausible Analytics services to process visitor data as defined in the DPA. We protect and secure your visitor data to the high standards set out in the agreement.</p> <h2 id="definitions">Definitions</h2> <ul> <li> <p>“You” or “customer” refers to the company or organization that signs up to use the Plausible Analytics to analyze website’s visitors.</p> </li> <li> <p>In the course of providing the Plausible Analytics service to customer pursuant to the agreement, Plausible Analytics may process visitor data on behalf of customer.</p> </li> <li> <p>In this Data Processing Agreement (“DPA”), “Data Protection Legislation” means the General Data Protection Regulation (Regulation (EU) 2016/279), and all other applicable laws relating to processing of visitor data and privacy that may exist in any relevant jurisdiction.</p> </li> <li> <p>“data controller”, “data processor”, “data subject”, “personal data” and “processing” shall be interpreted in accordance with applicable Data Protection Legislation.</p> </li> <li> <p>The parties agree that customer is the data controller and that Plausible Analytics is its data processor in relation to visitor data that is processed in the course of providing the service.</p> </li> </ul> <h2 id="privacy-and-security-of-your-visitor-data">Privacy and security of your visitor data</h2> <p>We take many measures to protect and secure your data through backups, redundancies, and encryption. When you use our service to measure your website stats, Plausible Analytics will collect information about your visitors.</p> <p>You entrust us with your site data and we take that trust to heart. You agree that Plausible Analytics may process your data as described in our data policy and for no other purpose. We do our best to deserve that trust by being open about <a href="https://plausible.io/about">who we are, how we work</a>, and keeping an open door to <a href="https://plausible.io/contact">your feedback</a>.</p> <p>You own all right, title, and interest to your website data. We obtain no rights from you to your website data. We do not collect and analyze personal information from web users and use these behavioral insights to sell advertisements. When using Plausible Analytics, you 100% own and control all of your website data. We don’t sell or share your site data to any third-parties, and we don’t abuse your visitor’s privacy.</p> <p>Even though the purpose of Plausible Analytics is to track the usage of a website, this can still be done without tracking, collecting or storing any personal data or personally identifiable information (PII), without using cookies and while respecting the privacy of your website visitors.</p> <p>By using Plausible Analytics, all the site measurement is carried out absolutely anonymously. We minimize data collection in general. We measure only the most essential data points and nothing else. All the metrics we do collect fit on one single page.</p> <p>We do not attempt to generate a device-persistent identifier because they are considered personal data under GDPR. We do not use cookies, browser cache nor the local storage. We do not store, retrieve nor extract anything from visitor’s devices. The data we process cannot be used to identify any single individual.</p> <p>Every single HTTP request sends the IP address and the User-Agent to the server so that’s what we use. We generate a daily changing identifier using the visitor’s IP address and User-Agent. To anonymize these datapoints and make them impossible to relate back to the user, we run them through a hash function with a rotating salt.</p> <blockquote> <p>hash(daily_salt + website_domain + ip_address + user_agent)</p> </blockquote> <p>This generates a random string of letters and numbers that is used to calculate unique visitor numbers for the day. The raw data IP address and User-Agent are never stored in our logs, databases or anywhere on disk at all.</p> <p>Old salts are deleted every 24 hours to avoid the possibility of linking visitor information from one day to the next. Forgetting used salts also removes the possibility of the original IP addresses being revealed in a brute-force attack. The raw IP address and User-Agent are rendered completely inaccessible to anyone, including ourselves.</p> <p>The group of data subjects affected by the processing of their data under this agreement includes end-users of the controller’s websites which make use of the service provided by the processor.</p> <p>You can find more information about our processing of your visitor data and what types/categories of data we collect on your behalf in our publicly available <a href="https://plausible.io/data-policy">data policy</a>.</p> <h2 id="organizational-and-technical-security-measures">Organizational and technical security measures</h2> <p>All of the data that we do track is kept fully secured, encrypted and hosted on renewable energy powered server in Germany. This ensures that all of the website data is being covered by the European Union’s strict laws on data privacy. Your visitor data never leaves the EU and EU-owned cloud infrastructure. You can read about Hetzner and their server security certifications <a href="https://www.hetzner.com/unternehmen/zertifizierung/">here</a>.</p> <p>For encryption, we use https in transit and the hashing process at rest. Our hashing process is much stronger than encryption. Encryption implies that there’s a key that can decrypt and reveal the raw data. In our database the raw IP address and User Agent are rendered completely inaccessible to anyone, including ourselves. In addition to this, we use strict firewall rules and private encrypted networking. We keep offsite backups with replication including strong bcrypt passwords.</p> <p>Plausible Analytics is open source software which means that our source code is available and accessible on GitHub so anyone can check it out and audit it. You can read it, inspect it and review it to understand how it works and to ensure it keeps the data private and secure. This gives you and everyone else full transparency on how we handle the website traffic data.</p> <p>With more than 15,000 GitHub stars, there are a lot of eyes on our code and it is this transparency and openness that means that open source products can be more trustworthy than proprietary and closed source products. Our software is updated several times per week and we also have a way for people to report <a href="https://plausible.io/vulnerability-disclosure-program">any security vulnerabilities</a>.</p> <p>A more detailed overview about our security practices can be found on <a href="https://plausible.io/security">plausible.io/security</a>.</p> <h2 id="processors-obligations-with-respect-to-the-controller">Processor’s obligations with respect to the controller</h2> <ul> <li> <p>Plausible Analytics will process visitor data only in accordance with instructions from customer through the settings of the service, i.e. (a) to operate, maintain and support the infrastructure used to provide the service; (b) to comply with customer’s instructions and processing instructions in their use, management and administration of the service; (c) as otherwise instructed through settings of the service. Plausible Analytics will only process visitor data in accordance with the agreement.</p> </li> <li> <p>Plausible Analytics shall notify customer without undue delay if, in Plausible Analytics’s opinion, an instruction for the processing of visitor data given by customer infringes applicable Data Protection Legislation.</p> </li> <li> <p>Plausible Analytics shall guarantee the confidentiality of visitor data processed hereunder.</p> </li> <li> <p>We as humans can access your data to help you with support requests you make and to maintain and safeguard Plausible Analytics to ensure the security of your data and the service as a whole. Plausible Analytics shall ensure that all Plausible Analytics personnel required to access the visitor data are trained in GDPR and data privacy, informed of the confidential nature of the data and comply with the obligations sets out in this agreement.</p> </li> <li> <p>Plausible Analytics shall implement and maintain appropriate technical and organisational security measures designed to protect the visitor data against unauthorised or unlawful processing and against accidental loss, destruction, damage, theft, alteration or disclosure. These measures shall be appropriate to the harm which might result from any unauthorised or unlawful processing, accidental loss, destruction, damage or theft of the visitor data and having regard to the nature of the visitor data which is to be protected.</p> </li> <li> <p>We do work with sub-processors. With each vendor, we assess their commitment to privacy and we sign a data processing agreement with them that include the controller-processor Standard Contractual Clauses. Any such subcontractors will be permitted to process data only to deliver the services Plausible Analytics has retained them to provide, and they shall be prohibited from using data for any other purpose. Plausible Analytics shall notify the controller when modifying the list of subprocessors using our in-app notifications, email and/or blog. The controller is able to legitimately object and may terminate the agreement.</p> </li> <li> <p>The only two cloud services we use as subcontractors that come in touch with your site data are BunnyWay d.o.o. (Slovenian owned for our CDN) and Hetzner Online GmbH (German owned for our servers). All of your site data is securely stored in the EU on EU-owned server infrastructure and it never leaves the EU. You can find the list of other cloud services and third party services that we use in our <a href="https://plausible.io/privacy">privacy policy</a>.</p> </li> <li> <p>If Plausible Analytics becomes aware of any accidental, unauthorised or unlawful security breach, destruction, loss, alteration, or disclosure of the personal data that is processed by Plausible Analytics in the course of providing the service, it shall without undue delay (not later than 48 hours after having become aware of it), notify customer by email and provide customer with a description of the incident as well as periodic updates to information about the incident, including its impact on customer content. Plausible Analytics shall additionally take action to investigate the incident and reasonably prevent or mitigate the effects of the incident.</p> </li> <li> <p>Plausible Analytics shall not on its own authority rectify, erase or restrict the processing of visitor data that is being processed on behalf of the controller (unless this is required by law or the Processor Terms of Service), but shall only do so on documented instructions from the controller and in accordance to the data retention rules associated to the controller subscription plan.</p> </li> <li> <p>Plausible Analytics shall assist the controller in complying with the obligations concerning the security of personal data. Plausible will also provide assistance to the controller for DPIAs. Where a data subject asserts their rights as a data subject, this request will be forwarded to the controller without delay.</p> </li> </ul> <h2 id="how-we-handle-delete-instructions">How we handle delete instructions</h2> <p>You can choose to <a href="https://plausible.io/docs/delete-account">delete your account</a> and <a href="https://plausible.io/docs/delete-site-data">delete your site stats</a> at any time. We provide simple no-questions-asked deletion links.</p> <p>All your stats will be permanently deleted immediately when you delete your Plausible Analytics account or when you delete your site stats. We cannot recover this information once it has been permanently deleted.</p> <h2 id="customer-undertakings-and-plausible-analytics-assistance">Customer undertakings and Plausible Analytics assistance</h2> <ul> <li> <p>Customer warrants that it has all necessary rights to provide to Plausible Analytics the visitor data for processing in connection with the provision of the Plausible Analytics Services.</p> </li> <li> <p>Customer shall comply at all times with Data Protection Legislations in respect of all visitor data it provided to Plausible Analytics pursuant to the Agreement.</p> </li> <li> <p>Customer understands, as a controller, that it is responsible (as between customer and Plausible Analytics) for:</p> </li> </ul> <ol> <li> <p>determining the lawfulness of any processing, performing any required data protection impact assessments, and accounting to regulators and individuals, as may be needed;</p> </li> <li> <p>providing relevant privacy notices to data subjects as may be required in your jurisdiction;</p> </li> <li> <p>implementing your own appropriate technical and organizational measures to ensure and demonstrate processing in accord with this DPA;</p> </li> <li> <p>notifying any relevant regulators or authorities of any incident as may be required by law in your jurisdiction.</p> </li> </ol> <h2 id="liability-and-indemnity">Liability and Indemnity</h2> <ul> <li>Each party indemnifies the other and holds them harmless against all claims, actions, third party claims, losses, damages and expenses incurred by the indemnified party and arising directly or indirectly out of or in connection with a breach of this DPA.</li> </ul> <h2 id="duration-and-termination">Duration and Termination</h2> <ul> <li> <p>The DPA is effective as of October 21, 2020 and replaces and supersedes any previously agreed data processing agreement between you and Plausible Analytics relating to the GDPR.</p> </li> <li> <p>Termination or expiration of this DPA shall not discharge the parties from the confidentiality obligations herein.</p> </li> </ul> <h2 id="are-customers-required-to-sign-the-plausible-analytics-dpa">Are customers required to sign the Plausible Analytics DPA?</h2> <p>In order to use our products and services, you need to accept our DPA. By using our product you are agreeing to our terms of service, and you are automatically accepting our DPA and do not need to sign a separate document. We provide the same privacy rights and protection to all customers.</p> <h2 id="can-a-customer-share-the-plausible-analytics-dpa-with-its-customers">Can a customer share the Plausible Analytics DPA with its customers?</h2> <p>Yes. The DPA is a publicly available document and customers who wish to share it with their customers to confirm our security measures and other terms may feel free to do so.</p> <h2 id="do-customers-need-to-notify-anyone-upon-accepting-our-dpa">Do customers need to notify anyone upon accepting our DPA?</h2> <p>No. You are not required to notify us or any third party upon accepting our DPA though, as mentioned above, you are free to do so.</p> <h2 id="contact-us">Contact Us</h2> <p>If you have a question about the Data Processing Agreement (DPA), please <a href="https://plausible.io/contact">contact us</a>.</p> <p>If you have any questions or concerns regarding your information and personal data, please contact us at <a href="mailto:privacy@plausible.io">privacy@plausible.io</a>.</p> <p>Last updated: November 27, 2023</p> </div> </article> </main><div class="bg-gray-800"> <div class="container py-12 px-4 sm:px-6 lg:py-16 lg:px-8"> <div class="xl:grid xl:grid-cols-3 xl:gap-8"> <div class="my-8 xl:my-0"> <h4 class="leading-5 font-semibold tracking-wider text-gray-300"> <img src="/assets/images/icon/plausible_logo_dark.svg" class="inline-block w-44 mr-1"/> </h4> <p class="mt-4 text-gray-400 text-base leading-6"> Made and hosted in the EU <span class="text-lg">🇪🇺</span><br/> Solely funded by our subscribers.<br/> </p> </div> <div class="grid grid-cols-2 gap-8 xl:col-span-2"> <div class="md:grid md:grid-cols-2 md:gap-8"> <div> <h4 class="text-sm leading-5 font-semibold tracking-wider text-gray-400 uppercase"> Why Plausible? </h4> <ul class="mt-4"> <li> <a href="/simple-web-analytics" class="text-base leading-6 text-gray-300 hover:text-white"> Simple metrics </a> </li> <li class="mt-4"> <a href="/lightweight-web-analytics" class="text-base leading-6 text-gray-300 hover:text-white"> Lightweight script </a> </li> <li class="mt-4"> <a href="/privacy-focused-web-analytics" class="text-base leading-6 text-gray-300 hover:text-white"> Privacy focused </a> </li> <li class="mt-4"> <a href="/open-source-website-analytics" class="text-base leading-6 text-gray-300 hover:text-white"> Open source </a> </li> <li class="mt-4"> <a href="/most-accurate-web-analytics" class="text-base leading-6 text-gray-300 hover:text-white"> GA4 Accuracy comparison </a> </li> <li class="mt-4"> <a href="/audience-segmentation" class="text-base leading-6 text-gray-300 hover:text-white"> Visitor segmentation </a> </li> <li class="mt-4"> <a href="/for-ecommerce-saas" class="text-base leading-6 text-gray-300 hover:text-white"> Ecommerce tracking </a> </li> <li class="mt-4"> <a href="/white-label-web-analytics" class="text-base leading-6 text-gray-300 hover:text-white"> White label </a> </li> </ul> </div> <div class="mt-12 md:mt-0"> <h4 class="text-sm leading-5 font-semibold tracking-wider text-gray-400 uppercase"> Comparisons </h4> <ul class="mt-4"> <li> <a href="/vs-google-analytics" class="text-base leading-6 text-gray-300 hover:text-white"> vs Google Analytics </a> </li> <li class="mt-4"> <a href="/vs-matomo" class="text-base leading-6 text-gray-300 hover:text-white"> vs Matomo </a> </li> <li class="mt-4"> <a href="/vs-cloudflare-web-analytics" class="text-base leading-6 text-gray-300 hover:text-white"> vs Cloudflare </a> </li> </ul> </div> </div> <div class="md:grid md:grid-cols-2 md:gap-8"> <div> <h4 class="text-sm leading-5 font-semibold tracking-wider text-gray-400 uppercase"> Community </h4> <ul class="mt-4"> <li> <a href="/changelog" class="text-base leading-6 text-gray-300 hover:text-white"> What's new </a> </li> <li class="mt-4"> <a target="_blank" href="/status" class="text-base leading-6 text-gray-300 hover:text-white"> Status </a> </li> <li class="mt-4"> <a href="/blog" class="text-base leading-6 text-gray-300 hover:text-white"> Blog </a> </li> <li class="mt-4"> <a href="/docs" class="text-base leading-6 text-gray-300 hover:text-white"> Documentation </a> </li> <li class="mt-4"> <a target="_blank" href="https://github.com/plausible/analytics" class="text-base leading-6 text-gray-300 hover:text-white"> GitHub </a> </li> <li class="mt-4"> <a target="_blank" href="https://twitter.com/plausiblehq" class="text-base leading-6 text-gray-300 hover:text-white"> Twitter </a> </li> <li class="mt-4"> <a target="_blank" rel="me" href="https://fosstodon.org/@plausible" class="text-base leading-6 text-gray-300 hover:text-white"> Mastodon </a> </li> <li class="mt-4"> <a target="_blank" href="https://www.linkedin.com/company/plausible-analytics/" class="text-base leading-6 text-gray-300 hover:text-white"> LinkedIn </a> </li> </ul> </div> <div class="mt-12 md:mt-0"> <h4 class="text-sm leading-5 font-semibold tracking-wider text-gray-400 uppercase"> Company </h4> <ul class="mt-4"> <li class="mt-4"> <a href="/about" class="text-base leading-6 text-gray-300 hover:text-white"> About </a> </li> <li class="mt-4"> <a href="/contact" class="text-base leading-6 text-gray-300 hover:text-white"> Contact </a> </li> <li class="mt-4"> <a href="/privacy" class="text-base leading-6 text-gray-300 hover:text-white"> Privacy </a> </li> <li class="mt-4"> <a href="/data-policy" class="text-base leading-6 text-gray-300 hover:text-white"> Data policy </a> </li> <li class="mt-4"> <a href="/terms" class="text-base leading-6 text-gray-300 hover:text-white"> Terms </a> </li> <li class="mt-4"> <a href="/dpa" class="text-base leading-6 text-gray-300 hover:text-white"> DPA </a> </li> <li class="mt-4"> <a href="/security" class="text-base leading-6 text-gray-300 hover:text-white"> Security </a> </li> <li class="mt-4"> <a href="/imprint" class="text-base leading-6 text-gray-300 hover:text-white"> Imprint </a> </li> </ul> </div> </div> </div> </div> </div> </div> <script> </script> <script type="text/javascript" src="/assets/js/alpine.js?v=1743500318" defer></script> <script type="text/javascript" src="/assets/js/index.js?v=1743500318" defer></script> </body> </html>