← Back to Arbito
Privacy Policies
Your Arbito account is one sign-in shared across our apps; its policy covers the account itself. Each app's policy covers the data you create inside that app.
To delete your account and the data in every connected app, see arbito.co/account. How the apps fit together: How Arbito works.
Website analytics & your choice
We use first-party, aggregate statistics to improve arbito.co. We do not use advertising trackers, third-party analytics, or link website visits to your Arbito account. You can turn website analytics off without affecting the website or your apps.
Your opt-out is saved in a host-only preference cookie for 180 days. It contains only off, not an identifier, and is used only to remember your choice. Allowing analytics removes this cookie. This choice applies to this browser on this website; repeat it on other browsers or after clearing cookies. Global Privacy Control and Do Not Track signals also turn these statistics off, even if you previously allowed them. These controls work without signing in; the buttons also work without JavaScript.
- What is counted: page views, the referring website’s domain (not its full address), campaign labels in links (
utm_source, utm_medium, utm_campaign), broad device type and whether traffic appears to come from a person, crawler or link-preview service. We use these totals to improve the website, not to target advertising or make decisions about individual visitors.
- Browser signal: when analytics are on, a small script sends the page path to our own server once after the first pointer movement, scroll, tap or key press. It does not send your interaction details, account information or a device identifier, and uses no browser storage for analytics.
- Temporary visitor codes: the server uses your IP address and browser user-agent text to create a daily, one-way visitor code with a random daily salt. This is temporary pseudonymous information used to avoid counting the same visitor repeatedly and to match the page signal. Codes and pending visits stay in server memory, are not exported or written to our analytics database, and are cleared on daily rotation or server restart. Unconfirmed visits settle after about 30 minutes. We do not retain raw IP addresses in our analytics collector.
- When you turn analytics off: the server stops including subsequent requests in page-view, visitor, campaign and probe statistics, and the browser stops sending the interaction signal. We also discard unaggregated visits associated with the current daily visitor code. Previously aggregated totals cannot be traced back to you or individually removed. Essential request handling and hosting/security logs continue.
- Where totals go: only daily aggregate counts are sent to our private Arbito admin dashboard. They contain no IP addresses, visitor codes or account identifiers, are not combined with your account, and are not sold or supplied to advertising services. We retain these aggregate totals without a scheduled expiry.
- Hosting: Railway processes connection data, including IP addresses, to deliver the site and retains operational logs under its own retention arrangements. Our application request logs include time, method and path, without query strings. The analytics choice does not disable essential delivery or security processing.
Website analytics information updated October 19, 2026.
Questions: support@arbito.co