Website analytics privacy
Anyplane operates its own Umami analytics service. Analytics may include generic screen labels, approved campaign categories, measured page-performance samples, browser and device information, language, coarse location, referring website origin, and a small set of fixed action names. In Shieldplane, the action names are household created, policy saved, enrollment created, and connection verified; they are sent only after the server confirms the action. These events contain no properties, and the local demonstration does not send product events. Analytics never includes raw page titles, arbitrary URL query values, URL fragments, page content, household labels, child names, DNS queries or domains, policy values, enrollment credentials, reports, email addresses, or account, user, or resource identifiers. Analytics uses no cookies or stored analytics identifiers. Umami derives short-lived pseudonymous sessions from the request IP address and user agent using a rotating salt; the analytics database does not store raw IP addresses. We honor browser Do Not Track and Global Privacy Control signals. Analytics events are retained for 180 days; backup objects expire within a further 14 days. Analytics failures do not prevent using the app. This service has no approved public session-replay or heatmap paths, so it does not collect session replay or heatmaps.