Legal Privacy policy
Privacy policy
This page describes how RetaFunnel handles data on retafunnel.com, in the application at app.retafunnel.com and through the tracker installed on customer sites.
Placeholder. The final policy will be published here before public launch. Last updated 2026-11-07.
Where data is stored
All customer data is processed and stored in the European Union (Frankfurt) on Supabase, behind Cloudflare Workers. Ad-platform credentials are encrypted at rest.
What the tracker collects
Behaviour events on pages where a customer has installed the tracker: pageviews with attribution parameters, scroll depth, video progress, quiz steps, clicks, form interactions, active time. Emails and phone numbers submitted in forms are hashed (SHA-256) in the browser before being sent; raw values are stored only when a customer explicitly enables it. IP addresses are truncated to /24 before storage.
Consent
Each customer site chooses a consent level (auto, implied or strict). In auto and strict modes no persistent identifier is set until consent is signalled through a consent management platform or the fs.consent() call.
Retention and deletion
Retention is configured per workspace. A deletion endpoint removes a person and cascades through sessions, memberships and any audiences synced to Meta or Google.
Contact
Questions about data protection: privacy@retafunnel.com.