Some websites use Cromojo analytics to understand how visitors find and use their site. Analytics is cookie-free by default; websites can also enable optional returning-visitor tracking. This notice explains what we receive.
Who is responsible: The website you visited is the data controller and decides what is measured and why. Cromojo (HUNA VC Pty Ltd, Australia; EU representative: eu-representative@cromojo.com) acts as that website's data processor and only processes data on its instructions.
Where the data comes from: We receive it from the website you visited, not from you directly.
What we process: Pages viewed, referrer, approximate (country/region) location, browser/device type, and a one-way hashed identifier derived in memory from your IP address and browser. We do not store your IP address, and the default analytics hash uses a per-site secret that is destroyed daily. In this default mode, we set no cookies and store nothing on your device. Optional returning-visitor tracking uses first-party cookies and browser storage, subject to the website's consent settings. We honour Do-Not-Track and Global Privacy Control signals.
Session recordings: If the website you visited has switched on session recordings, we also record the layout of the pages you saw, mouse movement, clicks and scrolling. Text is hidden in your browser before anything is sent, and what you type into forms is always hidden. A recording also holds a description of your device (browser and system versions, device model, screen size, time zone, language) and any error messages your browser reports. We never record visitors whose browser sends Global Privacy Control or Do Not Track. Recordings set no cookies and are stored in the EU (the Netherlands).
Why / legal basis: To produce aggregate audience and revenue statistics for the website operator, under the operator's legitimate interests (or consent, where the operator relies on it).
Retention: Pseudonymised analytics are retained up to 26 months, then deleted automatically. Session recordings are deleted after 14 to 90 days, depending on the website's plan, and the heatmap data taken from them within 180 days.
Your rights: You have the rights of access, rectification, erasure, restriction, objection and portability. Because the website operator is the controller, please contact that website to exercise your rights; Cromojo will assist them. You may also contact our EU representative at eu-representative@cromojo.com, and you may lodge a complaint with your local supervisory authority.
