Your data stays yours.
Bannivo collects only the data needed for banner decisions, shares it with no one and deletes it when it expires. It is designed to work in line with KVKK (Turkey's data protection law); compliance is achieved together with your site's cookie consent setup.
First-party tracking
The tracking snippet uses only a single visitor cookie (_bt_v) on your site's own domain. No third-party cookies, fingerprinting or advertising IDs.
Respects cookie consent
It follows the Google Consent Mode signal: without consent it writes no persistent ID, and if consent is withdrawn it deletes the cookie and that visitor's records. It also works with your own consent banner.
No IP addresses stored
IP addresses are used momentarily to limit abuse and are never written to the database. No personal data such as names, emails or phone numbers is collected.
Deletable data
Raw data is permanently deleted when your plan's data history period ends. All records for a single visitor can be deleted from the dashboard by visitor ID (data subject requests).
EU hosting and backups
The application and database run in the European Union (the Netherlands). Nightly backups go over an encrypted connection to storage under EU jurisdiction and are kept for 14 days.
Application security
Passwords are hashed with scrypt, sessions are kept in HttpOnly cookies, and the order webhook requires an HMAC-SHA256 signature. Data is accepted only from domains you allow.
| Collected | Why | Not collected |
|---|---|---|
| Page views, page type, device type | Slot and banner reports | IP address, browser fingerprint |
| Banner impressions and clicks | Viewable impressions, click-through rate | Session recordings, keystrokes |
| Order number, amount, products | Revenue attribution | Customer name, address, email, payment details |
| Random visitor ID | Linking a click to an order within 7 days | Cross-site tracking |