intrebit — Privacy

We keep things simple. We don’t sell data, we don’t run creepy trackers, and we only collect what we need to run this website.

What we collect

When you visit intrebit.com, we process a small amount of technical data to keep the site secure, prevent abuse, and understand basic usage.

Server/security logs (Cloudflare + our server): IP address, request metadata, and security signals
Device, browser + performance: device type, browser/OS family (names only, no versions), a coarse screen-size bucket, and anonymous performance metrics (Core Web Vitals)
Page-level usage: the page path you visit, the referrer domain (where you came from), and any UTM campaign parameters
Engagement signals: time on page, scroll depth, and clicks on outbound links and downloads
Approximate location: country-level location derived from your IP address (the IP address itself is not stored)

We do not use this information to identify you personally, and we don’t sell it.

What we don’t do

No advertising trackers
No selling or renting personal data
No user profiles
No “follow you around the internet” stuff

Cookies

We do not use advertising or marketing cookies. Our website may use strictly necessary cookies for security and basic functionality (for example, Cloudflare protection features).

Analytics

We use dullahan — an open-source, privacy-friendly analytics tool that we self-host on our own server in the European Economic Area (EEA) — to understand how the website is used. We run it ourselves: the data is not sent to, shared with, or sold to any third party, and there is no third-party analytics provider involved.

Dullahan stores nothing on your device and reads nothing from it — no cookies, no local or session storage, and no device fingerprinting. That is why you won’t see a cookie-consent banner for analytics.

For each page view we record:

the page path you visit (query strings and hash fragments are stripped before storage);
the referrer domain (where you came from) and any UTM campaign parameters in the link you followed;
your country (derived from your IP address — see below);
your device type (mobile, tablet, or desktop) and an approximate viewport width;
engagement signals: time on page, scroll depth, and clicks on outbound links and downloads;
anonymous performance metrics (Core Web Vitals — load and responsiveness timings);
any custom product events we choose to record (for example, that a particular feature was used).

Counting visitors (sessions). To count unique visitors and measure sessions and funnels, our server briefly reads your IP address and User-Agent to compute a salted, hashed identifier. The raw IP address is never stored. The salt rotates daily and is deleted after 48 hours, so the identifier cannot be linked across days — by design we cannot track returning visitors over time, build long-term profiles, or identify individuals. This step also gives us a coarse browser and operating-system family (for example, “Chrome on macOS”; names only, never versions).

Your IP address is never stored. It is read only in transit — to derive your country and to compute the salted session identifier described above — and is then discarded.

We honour the Do Not Track and Global Privacy Control browser signals — if either is set, you are not tracked at all.

Dullahan is open source. Source code .

Legal bases (EEA/UK)

Where GDPR applies, we process:

Analytics on the basis of our legitimate interests (Art. 6(1)(f) GDPR) in understanding aggregate, site-wide usage, relying on the data being pseudonymised and minimised as described above.
Site security and reliability data on the basis of legitimate interests.
Contact messages to take steps at your request / to respond (performance of a contract or legitimate interests depending on context).

Retention

We keep data only for as long as needed:

Analytics: the event records dullahan stores are non-identifying (no IP address, no cookies, no cross-day identifier). We retain them for as long as we operate the website so we can understand long-term trends; we never sell or repurpose them.
Security logs: retained for a limited period for security and troubleshooting.
Contact messages: retained only as long as needed to respond and for reasonable follow-up.

Sharing and processors

We use a small number of service providers to run the site. They process data on our behalf under appropriate safeguards:

Cloudflare — CDN, website hosting, and security/abuse protection.
Our EEA hosting provider — runs the server where our self-hosted analytics (dullahan) and contact-form messages are stored.
dullahan — self-hosted analytics on that server; there is no third-party analytics processor.

We do not sell or share personal data with advertisers.

Your rights

Depending on your location, you may have rights to access, correct, delete, or object to our processing. To make a request, email us.

Contact

If you contact us (by email or contact form), we process the information you provide (such as your email address, name, and message) so we can respond.

We use your message only to reply and handle your request.
We do not add you to marketing lists unless you explicitly ask.
We keep contact messages only as long as needed to respond and for a short period afterward for follow-up.

Email us