4Paid
Legal

PrivacyPolicy

Last updated: April 12, 2026

1. Introduction

This Privacy Policy ("Policy") describes how 4Paid ("we," "us," or "our") collects, uses, and protects information through the 4Paid analytics platform, including our website, dashboard, tracking pixel, APIs, and related services (the "Service").

4Paid is a web analytics platform currently in public beta. The Service enables website and application owners ("Customers") to understand how their users interact with their products through a lightweight tracking pixel.

By using the Service, you agree to the practices described in this Policy. If you do not agree, please do not use the Service.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, and password (hashed). If you sign in with Google OAuth, we receive your name, email, and profile picture from Google.

Analytics Data (Collected by the Pixel)

When a Customer installs the 4Paid tracking pixel on their website, the pixel collects the following data from their end users ("Visitors"):

  • Page URLs, pathnames, and referrer URLs
  • UTM campaign parameters
  • Browser name, operating system, and device type (parsed from User-Agent)
  • Screen dimensions
  • Country, region, and city (derived from IP address — IP addresses are not stored)
  • A randomly-generated visitor ID (stored in localStorage, not a cookie)
  • A session ID (stored in sessionStorage, 30-minute timeout)
  • Custom events sent via the tracking API
  • Page performance metrics (load time, Core Web Vitals)
  • JavaScript errors

What We Do NOT Collect

  • We do not use cookies
  • We do not collect or store IP addresses
  • We do not fingerprint browsers
  • We do not track users across websites
  • We do not collect personally identifiable information from Visitors unless the Customer explicitly sends it via the identify() API

3. How We Use Information

  • To provide analytics dashboards and reports to Customers
  • To maintain and improve the Service
  • To send account-related emails (welcome, password reset, scheduled reports)
  • To detect and prevent abuse of the Service

4. Data Storage and Security

Account data is stored in a PostgreSQL database hosted on Neon (AWS). Analytics event data is stored in Tinybird (ClickHouse). All data is encrypted in transit (TLS) and at rest.

API keys are generated with cryptographically secure random values and are scoped to individual projects.

5. Data Sharing

We do not sell, rent, or share personal data with third parties for their marketing purposes.

We may share data with:

  • Infrastructure providers (Vercel, Neon, Tinybird) — to operate the Service
  • Email provider (Resend) — to send transactional emails
  • Law enforcement — if required by law or valid legal process

6. Data Retention

Account data is retained while your account is active. Analytics event data is retained for the duration of your project's existence. You may delete your project and associated data at any time from the dashboard.

During the public beta, data retention policies may be adjusted as we refine the Service.

7. Your Rights

You may exercise the following rights by contacting us:

  • Access, correct, or delete your account data
  • Export your analytics data
  • Delete your account and all associated data
  • Object to or restrict processing of your data

8. Cookies

The 4Paid tracking pixel does not use cookies. The 4Paid dashboard website uses essential cookies only for authentication (session management). We do not use advertising or tracking cookies.

9. Children's Privacy

The Service is not directed at children under 16. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Policy from time to time. We will notify you of material changes by email or by posting a notice on the Service. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

11. Contact

If you have questions about this Policy or your data, contact us at [email protected].