Privacy Policy

This policy covers the website ombratattoo.com only. The Ombra Tattoo iOS and Android app is a separate product that handles photos, subscriptions and an in-app identity, none of which exist on this website — it has its own policy, linked at the end of this page.

When you open a page, our own analytics records:

• the page path and its language
• the site that linked you here. Most browsers send only the domain, and that is normally all we get — but if a site chooses to send the full address, we store it, capped at 200 characters
• campaign parameters in the link you followed (utm_source, utm_medium, utm_campaign, utm_content), when present
• your country, resolved by Cloudflare (see "Tools we use") — we receive the country code, not your IP address
• a short-lived visit id: it is not a cookie and is never written to your device's storage — it lives in the page's memory and is gone the moment you reload or close the tab. It is sent with each pageview so a visit counts as one visit, and it is stored next to those pageviews and next to the app-store tap that visit produced, if any — and to nothing else
• a coarse classification of your browser (human, search crawler, link-preview bot), derived from the user-agent and then discarded — the raw user-agent string is never stored

• No cookies, no localStorage, and no persistent device fingerprint that follows you between sites.
• No IP addresses in our analytics database.
• No names, emails or accounts — the site has no login and no forms.
• No advertising trackers and no cross-site tracking. If we ever run ads that link here, the ad platform's click id would arrive in the link and be recorded with the pageview — we will say so here before that happens.
• We do not sell, rent or share this data with data brokers or advertisers.

To answer two questions: which pages people find useful, and which ones lead people to the app. What we look at is aggregate — we can see that a page was viewed 40 times, not who viewed it. We could not identify you from it if we tried.

• Our own first-party analytics, running on our servers. Nothing is sent to a third-party analytics company.
• Cloudflare, which serves and protects the site. Like any provider that routes traffic, it necessarily sees the request — including your IP address — in order to deliver the page. We receive only the resulting country code from it.
• Standard web-server access logs, which contain IP addresses — unavoidable for any server on the internet. They exist only for security and troubleshooting, are never joined to the analytics above, and are never used to build a profile of you. They are kept in a rolling window capped by size rather than by date: once the cap is reached the oldest entries are discarded automatically. At the traffic this site currently sees that window is roughly the last month, and it gets shorter as traffic grows.

Buttons that open the App Store or Google Play go through a redirect on our own domain so we can count taps and send each device to the matching store. The redirect records the page path, intended app experience, broad content cluster, coarse device class and operating system, country code when available, selected store and destination, a registered campaign bucket, and a temporary random number for the current visit. It never stores your raw user-agent or IP address. The random number is made up fresh each time you load the site, is never stored on your device and is omitted when Do Not Track or Global Privacy Control is active. Once you reach a store, that store's privacy policy applies.

If your browser sends Do Not Track or Global Privacy Control, our pageview analytics stops: no pageview is recorded, and no visit id is created or attached to anything. One count survives, because it happens on our server rather than in your browser: a tap on an app-store button is still tallied against the page it came from, with no visit id. The site works exactly the same either way. There is no consent banner because there is nothing to consent to: no cookies are set and nothing that identifies you is collected.

We keep one row per pageview, and one per app-store tap, so we can compare periods over time. Those rows carry no name, no email, no account, no raw browser user-agent and no IP address, so there is nothing we could look up to identify you — and correspondingly no personal record to delete. If we ever change what this site collects, we will update this page and its effective date in the same change.

Questions about this policy: [email protected]