The part Google cannot say.

You pick the depth. Each one records more than the one before.

CHILL

Page views, how long each page stayed open, where people came from, and when someone starts or sends a form. Also which forms a page holds: the names of their fields and the words on their button, never what anyone types. Plus any event you send yourself.

VIBEY

Adds which links and buttons get pressed, how far down people scroll, how long named sections stay on screen, and which field someone left a form on.

FERAL

Adds every field people click into and leave, how long each took, whether it held anything (yes or no), which fields showed an error and what kind, repeated fast clicks on one spot, and how fast people scroll.

At every depth, each event also carries the path of the page, like /shop, and whether the visitor is on a phone, a tablet or a computer. Where people came from is the site they came from, plus any tracking tags in the link.

At every depth, never: the text anyone types into your forms, cookies, or anything kept in the visitor's browser. Only the path of an address is sent. Everything after a question mark or a hash is dropped, and emails, long numbers and tokens inside a path are replaced with a star. Button and link labels are cut to 60 characters, with emails and long numbers starred out. Password, hidden and card fields are never named or timed. Anything you mark to be ignored is left alone.

Nothing is stored on the visitor's device, so Moxel tells visitors apart on its own server. It makes a hash from a random salt that changes every day, your site key, the visitor's IP address and their browser details. The IP address is used in memory to make that hash. It is never stored.

Old salts are deleted. We keep only today's and yesterday's, because a request that arrives just after midnight still needs yesterday's. Once a salt is gone, the hashes it made cannot be rebuilt from an address, by us or by anyone holding the database.

One result of that: the hash starts over each day. Someone who visits on Monday and again on Tuesday is counted once on each day.

Known bots and crawlers. Visitors whose browser blocks trackers. Visitors who declined tracking, on sites that ask. Browsers driven by automation tools.

Moxel does not obey Do Not Track or Global Privacy Control by default. A site owner can turn that on with one setting, and then visitors who have either one on are not counted.

Visit data is stored in a Convex database, and logins for Moxel customers go through Clerk. These are the services that handle Moxel data. We do not offer a choice of region, and there is no EU-only hosting.

A site's raw visit record is kept for 30 days by default. The site owner can choose 30, 90 or 365 days in the site settings. After that it is deleted, not archived.

Daily totals, which are counts and the names of pages, forms and buttons, never a visitor, are kept for about 13 months and then deleted.

Deleting a site from its settings stops its key at once and clears its visits, totals and secret keys in the background. Secret keys are stored only as a hash, so we cannot show one again.

If you are in the EU or UK, you may need a data processing agreement with us. We do not have a signed one ready to send yet. If you need one, write to us and say so. What we do today, in plain words:

• You choose what Moxel watches: the depth, and anything you mark to be ignored.
• We use visit data only to show it to you, in your dashboard and through your own keys. We never sell it, share it for ads, or use it to train models.
• Deleting a site deletes its visits, its totals and its keys.

We store no names, emails or IP addresses, and the hash that tells visitors apart cannot be turned back into a person. That also means we cannot pick out one visitor's visits, so we cannot delete just theirs. There is no per-visitor delete today. Raw visits expire by themselves, and a site owner can delete the whole site. If a visitor writes to us, a person will answer.

The waitlist and the audit form store your name, email and the URL you gave us. We use them only to contact you about Moxel. Ask and we delete them.

If you create an account, Clerk handles your login. We keep the sites and secret keys you make.

Moxel is for businesses. We do not knowingly take sign-ups from anyone under 16.

If this page changes in a way that matters, we email customers before it takes effect. Questions or requests: privacy@moxel.dev.