Privacy Policy

Effective date: April 1, 2026 · Keylight Digital LLC

The short version

Beam is a privacy-first analytics service. We built it specifically to avoid the privacy problems that come with tools like Google Analytics. Here's what that means in practice:

  • We do not use cookies of any kind.
  • We do not collect IP addresses or store them.
  • We do not fingerprint your visitors.
  • We do not sell data to anyone, ever.
  • Your site's analytics data belongs to you.

What Beam collects from your visitors

When a visitor loads a page on your site with the Beam snippet installed, the following data is sent to our servers and stored:

  • Page path — the URL path visited (e.g., /blog/my-post), not the full URL
  • Referrer — where the visitor came from (e.g., google.com), if the browser provides it
  • Country — derived from Cloudflare's edge network header; never from IP geolocation we perform ourselves
  • Device type — screen width bucket (mobile, tablet, desktop)
  • Browser family — derived from the User-Agent header (e.g., Chrome, Firefox)
  • Screen width — the raw pixel width from screen.width
  • Language — the browser's preferred language (e.g., en-US)
  • Timestamp — when the pageview occurred (UTC)

We never store raw IP addresses. Country is extracted by Cloudflare's infrastructure before the request reaches our application code.

What Beam does NOT collect

  • IP addresses (we do not log or store them)
  • Cookies or any persistent identifiers
  • Personal names, email addresses, or any PII from your visitors
  • Cross-site tracking data
  • Mouse movements, clicks, or session recordings
  • Form inputs or on-page behavior beyond the pageview

Because we use no cookies and store no persistent identifiers, Beam cannot track individual visitors across sessions or across sites. This is a design choice, not a limitation.

How data is stored

Pageview data is stored in Cloudflare D1, a serverless SQLite database that runs on Cloudflare's global network. Cloudflare encrypts data at rest and in transit.

All infrastructure is managed by Keylight Digital LLC. We do not use third-party analytics processors for your site data.

Data retention

Pageview data is retained for the lifetime of your Beam account unless you ask us to close the account sooner. If you request account closure, we will delete the associated analytics data within 30 days.

Pro users can export pageview data from the dashboard. If you are on the free plan and need a copy of your data, email us and we will help.

GDPR, CCPA, and PECR compliance

Because Beam does not use cookies, does not collect personal data, and does not build profiles of individual users, using Beam on your website does not require:

  • A cookie consent banner
  • A GDPR consent mechanism for analytics
  • A PECR opt-out for tracking

Beam processes aggregate, anonymous pageview data only. Individual visitors are not identifiable from the data we store. We believe this is genuinely privacy-respecting analytics, not just a legal technicality.

For EU residents using Beam's dashboard (i.e., site owners who have accounts with us): Keylight Digital LLC is the data controller for your account information (email, password hash). You have the right to access, correct, or delete your account data at any time by contacting us.

Account data (for site owners)

When you create a Beam account, we collect and store:

  • Your email address (used to log in and send service emails)
  • A hashed password (we never store plaintext passwords)
  • Your Stripe customer ID (if you subscribe to Pro; Stripe handles payment data)
  • Your subscription status and plan

We use Stripe to process payments for Pro subscriptions. Neither Stripe nor our email provider receives your visitors' analytics data.

Cookies on beam.keylightdigital.dev

The Beam dashboard itself uses a single HttpOnly session cookie named beam_session to keep you logged in. This cookie is strictly necessary for authentication — no consent banner is required. No third-party cookies are set on our own domain.

Data requests

To request a copy of your data, request deletion, or ask any privacy-related questions, contact us at:

Email: ralph@keylightdigital.dev

Company: Keylight Digital LLC

We will respond within 30 days.

Changes to this policy

If we make material changes to this policy, we will update the effective date at the top of this page and notify account holders by email. Continuing to use Beam after changes are posted constitutes acceptance of the updated policy.