Privacy Policy

Bytek Tag collects pseudonymized user data for advertising conversion tracking and identity resolution. All personal identifiers (email addresses, phone numbers) are hashed client-side using SHA-256 before any data is transmitted. No clear-text personal data is ever stored or transmitted to Bytek servers.

• Hashed identifiers: SHA-256 hashes of email and phone (irreversible, one-way cryptographic function)
• Anonymous IDs: Random UUID visitor ID, session ID (not linked to real identity)
• Click IDs: Advertising platform click identifiers (gclid, fbclid, etc.) — public tracking parameters
• Page data: URL, page title, referrer, UTM parameters (publicly visible information)
• Device data: Browser user agent, screen resolution, language (no fingerprinting)

• Clear-text email addresses or phone numbers
• IP addresses (used transiently for geo-inference, never persisted)
• Financial information, passwords, or sensitive personal data
• Browser history, keystrokes, or screen recordings

All hashing occurs exclusively in the user's browser using the Web Crypto API (SHA-256). Raw personal data exists in memory only during the milliseconds of normalization and hashing — it is never logged, stored, or transmitted. Bytek acts as a data processor under GDPR; the customer (website operator) is the data controller.

• Cookie _bp: First-party cookie on the customer's domain (365 days, configurable). Contains anonymous visitor ID (UUID) and session ID. No PII.
• Cookie _bp_s: First-party HttpOnly cookie set by the server (365 days). Contains only the anonymous visitor ID (UUID). Used to extend identity persistence beyond Safari ITP limits. Not accessible by JavaScript.
• localStorage _bp: Browser storage on the customer's origin. Contains the full identity store: anonymous IDs, SHA-256 hashes (if captured), click IDs, first-touch data. Optional AES-GCM encryption available. Cleared on consent denial.
• Server-side: Event data stored in customer-configured BigQuery and/or PostgreSQL destinations. Default retention: 13 months with automatic purge on both PostgreSQL and BigQuery.
• Enrichment cache: Google Cloud Firestore (europe-west1), per-customer isolated collections. No clear-text PII.

Hashed identifiers are shared with advertising platforms (Google Ads, Meta, TikTok, etc.) only when the user has granted consent for the relevant category (marketing, analytics). Each platform receives data in its required format via server-side Conversion APIs (CAPI). Bytek does not sell or share data with third parties for purposes other than the customer's configured conversion tracking.

Additional data processing:

• User agent: Browser user agent string is collected for bot detection and analytics. It is stored as pseudonymized technical data.
• Pseudonymized identifier: A deterministic identifier is derived from a hash of browser fingerprint signals (timezone, screen properties, language). No raw fingerprint data is stored.
• Company identification: When enabled, visitor IP addresses are processed by ipapi.is (sub-processor) to identify the organization associated with the IP. Only the organization name and location are stored — the raw IP address is never persisted.

• Consent: Tags only fire when the required consent category is granted via the website's CMP (Consent Management Platform). bp('consent', 'denied') immediately clears all stored data and stops tracking.
• Right to erasure: Users can request deletion of their data. The website operator uses our cascade delete API to remove all records matching a hashed identifier from all datastores (PostgreSQL, BigQuery, Firestore) within 72 hours.
• Data portability: Event data is stored in standard formats (BigQuery, PostgreSQL) and can be exported by the customer at any time.

• Region: All processing in Google Cloud europe-west1 (Belgium) and EU multi-region
• Encryption: TLS 1.3 in transit, AES-256 at rest (Google Cloud default)
• Isolation: Per-customer service accounts, separate Firestore collections, no cross-customer data access
• Bot protection: User agent pattern matching (50+ known bots), IP rate limiting with auto-block

• Google Cloud Platform: Cloud Run, BigQuery, Firestore, Cloud Storage, Cloud SQL (region: europe-west1 / EU)
• Brevo (Sendinblue SAS): Transactional email delivery (password reset, notifications) — region: EU
• ipapi.is: IP-to-company resolution (when company identification is enabled). Only organization name and location are stored — the raw IP address is never persisted

For privacy inquiries, data deletion requests, or DPA agreements: privacy@bytek.ai