Proof, not promises.
Tally can't build a profile of anyone — not because we promise not to, but because the data to do it is never collected. Here's exactly what a Tally event stores, pulled live from the database right now.
Everything we store
This is the complete list of fields on an event — read straight from the live
events table. Notice what isn't here.
| Field | What it is |
|---|---|
| id | Internal row id |
| site_id | Which site (tenant) the event belongs to |
| ts_utc | When it happened — server receive time, UTC |
| visitor_id | A daily-rotating hash. Not reversible; changes every UTC day |
| kind | 'pageview' or 'event' |
| path | The page path (query strings not expected to carry PII) |
| referrer_source | Channel label — Search, Direct, Reddit, … |
| country | 2-letter country, from an IP lookup that is then discarded |
| device | desktop / mobile / tablet / bot |
| name | Custom event name (for product events) |
| meta | Developer-supplied, non-PII custom properties |
| browser | Chrome / Safari / Firefox / … |
| os | Windows / macOS / iOS / Android / … |
| referrer_domain | Referring site host, e.g. 'reddit.com' — never the full URL |
| utm_source | Campaign tag from the URL (developer-supplied) |
| utm_medium | Campaign tag from the URL (developer-supplied) |
| utm_campaign | Campaign tag from the URL (developer-supplied) |
| traffic_type | human / ai / bot |
What we never do
There's nowhere to put these, even by mistake.
Why you can't be followed across days
To count unique visitors within a day we derive
visitor_id = sha256(daily_salt : site : ip : user-agent). The salt is a random secret
that's regenerated at UTC midnight and never stored on an event. So tomorrow the same person
produces a completely different id — and yesterday's can't be reversed. "Unique visitors" is a
within-day count by design. The IP is used only to compute that hash and look up a country, then
discarded.
Wear it with confidence
Show your visitors you don't track them. Drop this badge on your site:
<a href="https://tally.arx52.co.uk/privacy">No cookies · powered by Tally</a>
It's yours — take it or delete it
Own your data, fully. From your account you can export every event for a site as a CSV, or delete a site and all of its data — instantly, no email tickets.
Because no cookies or directly-identifying data are used, Tally is designed to run without a consent banner in most jurisdictions. This is informational, not legal advice — integrators keep custom event properties free of PII and do their own local review.