Roles and page data
The creator or business publishing the page determines its content and visitor-data purposes. Unflaggable supplies hosting and tools and processes page data on their behalf. For its own security, billing and legal requests, the operator has separate controller responsibilities. Ask the creator for their legal identity, contact details and privacy notice.
Traffic measurement
The service records page views and outbound clicks automatically. Event records include time, link identifier, approximate country and city from hosting metadata, device/browser category, referrer hostname and campaign information. Pseudonymous visitor identifiers help estimate visits. Application analytics records do not contain raw IP addresses. Pseudonymisation does not make these records anonymous.
Creators are responsible for their visitor-facing privacy information and the legal basis for the analytics and personalization they configure. Contact the creator or use our privacy request form to exercise applicable rights.
Location, redirects and offers
If the creator enables the location greeting, approximate city or country data is requested automatically. Network location information and, where applicable, an IP-location service are used. The location provider receives an IP address to estimate a city or country. No GPS permission is requested. Cached lookup results expire within 24 hours.
Configured exit-intent offers use a browser-session marker to avoid repeating the offer. Browser handoff also uses session markers to prevent repeated attempts. Redirect destinations receive their own network requests when a visitor follows a link and apply their own privacy notices.
Requests and retention
Submit privacy requests through the main website with the affected page URL, approximate visit date and information needed to locate the relevant records. We may need proportionate verification and may coordinate with the creator. Do not send passwords or identity-document copies in the request form.
Recorded events are scheduled for deletion after 90, 365 or 730 days depending on the plan. Infrastructure logs and provider backups follow their own applicable retention settings. See the main Privacy notice for rights and provider information.