Compliance notes

What Tidemark’s design does

Sets no cookies and uses no local storage on the visitor’s device.
Stores no IP address and no raw user agent.
Doesn’t track across days, sites or devices.
Doesn’t send data to third parties. On a self-hosted installation, the data is in your own database. The only outbound request is the update check for the latest version number, which you can turn off.
Doesn’t need a signed-in visitor or any profile.

What it leaves to you

Your privacy notice. Say that you use analytics and what it measures.
Custom properties. Tidemark stores what you send. Keep personal data out of event names and properties.
Geolocation. City-level location, if you enable it, is derived from the IP at request time.
Backups, logs and your host. Your web server may keep its own access logs outside Tidemark.
Retention. Decide how long raw data is useful and set TIDEMARK_RETENTION_DAYS.

Respecting visitors who opt out

Visitors can exclude themselves by setting localStorage.plausible_ignore = 'true' in their browser. Browsers with Do Not Track enabled are not treated specially.