Privacy & analytics

Broc basic measurement

On our public pages, we record the page path, visit time, approximate country and region, device category, browser and operating-system family, and referring website domain when available. We also count clicks to sign in or sign up, clicks on email or telephone links, and successful new waitlist submissions. We do not include form contents in these measurements.

Campaign sources are limited to predefined categories such as newsletter, social media or QR. Full page queries, referral paths and referral queries are not saved.

What these numbers cannot tell us

We do not collect or infer age or gender. Location is approximate and may reflect a VPN or network provider. Broc’s basic session estimates use a random identifier held only in page memory. Reloading or opening another tab creates a new estimate, so this is not a count of unique people.

We do not store raw IP addresses, raw browser user-agent strings, account identifiers, conversations, private app paths, or email addresses in the website analytics database. Measurements are not joined to account or chat records.

Your choice

The Broc basic measurement setting controls both our website measurements and older article-view counter. The Google Analytics choice is separate and is off until you allow it. We honour Global Privacy Control and Do Not Track for both. Turning a setting off stops future collection by that service; it does not delete measurements already sent.

Broc basic measurement stores no analytics identifiers in cookies or browser storage. We save only your measurement choices in local storage. If storage is blocked, a choice lasts until the page is reloaded. Broc’s sign-in and security features use their own necessary session mechanisms; these analytics controls do not disable them.

If you allow Google Analytics

Google receives public page-view events, a public page title and a referring website domain when available, alongside information processed by its Analytics service. Google Analytics uses its own cookies to estimate visitors and sessions. We set those cookies to expire after 60 days without extending that expiry on each visit.

Google measurement is limited to our published public pages. We do not send account identifiers, chat content, form contents, private app pages or page queries. Public pages with a query or fragment are measured using their canonical page address, with those values removed. Advertising features and Google signals are disabled; Broc does not use this integration to infer age or gender.

You can stop Google measurement or reset the choice here. We remove this integration’s Google Analytics cookies when you withdraw consent. A request already sent cannot be recalled. Google data retention follows the property’s settings and is separate from Broc’s 90-day event history; standard aggregate reports may remain longer.

How Google uses information from sites that use its services

Storage and access

The site runs on Vercel and Broc’s basic measurements are stored in its Supabase database. This detailed event history is retained for 90 days and removed by a daily cleanup, which may leave up to one additional day before deletion. Access to the dashboard is restricted to authorised Broc administrators. Older per-article daily totals are stored separately without visitor-level details.

To limit automated abuse, the server temporarily uses rotating, hashed network rate keys. These are kept separately from analytics events, cannot be joined to a visit record, and are removed by daily cleanup after they expire. Hosting and security providers may process request information in their own operational logs; those logs are separate from this analytics dashboard.