> For the complete documentation index, see [llms.txt](https://docs.uxwizz.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.uxwizz.com/about/personal-data-information.md).

# Personal Data Information

This page describes data handled by the UXWizz visitor tracker and dashboard. The data collected depends on your recording mode, tracking settings, page content, and custom tags or events.

## Cookies (data stored on user's computer)

The visitor tracker uses browser storage rather than visitor-tracking cookies:

* **sessionStorage** holds session and pageview identifiers and can buffer recording or heatmap data before sending it to your UXWizz server.
* **localStorage** holds preferences such as consent and disabled tracking. These preferences apply to that browser and site origin; clearing storage removes them.

Browser session storage can survive reloads and session restoration. Do not assume that closing a tab is a guaranteed deletion or identity boundary. See [MDN's sessionStorage behavior](https://developer.mozilla.org/en-US/docs/Web/API/Window/sessionStorage).

## Personal information

### 1. What data is stored on the UXWizz server?

Depending on your configuration, stored data can include:

1. Session and pageview identifiers.
2. An IP-derived identifier or a plain IP address, plus browser and device information.
3. Country and optional city information derived from the IP address.
4. Screen resolution, visit times, duration, referrers, and visited URLs.
5. Clicks, pointer movement, scrolling, and recorded interaction data.
6. Page content and changes when [full recording](https://docs.uxwizz.com/about/pages/-MlFhp-p5VUf_FwF-x-1#b.-full-page-recording) is enabled.
7. Custom [tags](/api/tags.md) and [events](/api/events.md) supplied by your website.

URLs, page text, form fields, tags, and events can contain personal or sensitive information. Review the pages you track and [mask or exclude sensitive elements](/api/session-recording/ignore-specific-elements.md). Check a test recording after each relevant page change. Masking an input does not remove the same information if it also appears in page text, a URL, or an event.

### 2. Why is this data stored?

UXWizz uses this data to show traffic statistics, heatmaps, session playback, and reports. These views help you investigate website behavior and compare changes.

### 3. Opting out or in for tracking

A visitor can open a page where the tracker is installed with this query parameter:

```
https://www.example.com/?ust-opt-out
```

If the URL already has a query string, append `&ust-opt-out` instead. The tracker saves the preference in that site's local storage. Use `ust-opt-in` to reverse this consent preference. Other tracking restrictions can still apply.

The choice does not automatically apply to other browsers, devices, or site origins. It does not delete data already collected.

Administrators can also configure the tracking consent prompt and whether to respect the browser's Do Not Track signal. Configure your site's consent flow before enabling tracking where consent is required.

### 4. Data removal

**How can a visitor request deletion?**

Contact the operator of the tracked website. The operator must determine which records relate to the request using the information actually stored. An IP address or hash alone may not uniquely identify a person. Tags, events, URLs, or recorded content can provide other identifying information.

**Can a person be associated with a session?**

That depends on the collected data and other information available to the operator. Hashing an IP address does not by itself establish that the whole recording is anonymous.

**How long is data stored?**

Retention depends on your limits, enabled cleanup tasks, and successful task execution. Review [Scheduled Tasks and retention](/installation/optimization-tips/auto-delete-old-data-cron-jobs.md), including any Agency databases. Also apply your retention policy to backups and exports. An opt-out does not remove earlier records.

## Data stored of webmasters using the UXWizz dashboard

Dashboard sign-in uses authentication cookies. Account, access, and security-session information is stored on your UXWizz server.

Self-hosting keeps the analytics database on infrastructure you control. It does not mean every feature is offline: license and update checks contact UXWizz services, and configured [Ask AI](/guides/ask-ai.md) providers receive the requests described on that page. Review optional integrations before using them with sensitive information.

This page describes the analytics product's technical behavior. For the UXWizz website, see [Privacy Policy for uxwizz.com](/about/privacy-policy-uxwizz.com.md).