Arktis.Back to home

Privacy Policy

Last updated: January 21, 2025

Introduction

Arktis ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard information when you visit our website (arktis.so) or use our analytics services.

We designed Arktis with privacy at its core. Our analytics platform helps businesses understand their users while respecting individual privacy rights, including full compliance with GDPR and other data protection regulations.

Information We Collect

When You Visit arktis.so

We use our own analytics service on this website. Here's what we collect:

  • Without consent (via localStorage): Anonymous pageview data, traffic sources, device type, browser, and country (derived from IP, which is not stored).
  • With consent (via cookies): Session recordings to understand user experience, persistent visitor identification for cross-session analytics.

When You Create an Account

If you sign up for Arktis, we collect:

  • Email address (for authentication and communication)
  • Account usage data (sites created, features used)
  • Payment information (processed securely by our payment provider)

Data Collected by Our Analytics Service

When websites use Arktis to track their visitors:

  • Pageviews and user journey paths
  • Traffic sources and attribution data
  • Device information (browser, OS, screen size)
  • Geographic location (country/city level, derived from IP)
  • Session recordings (only with explicit consent)

Important: We never store raw IP addresses. Location data is derived at processing time and IP addresses are immediately discarded.

How We Use Your Information

  • To provide and improve our analytics services
  • To authenticate users and manage accounts
  • To communicate important updates about our service
  • To detect and prevent fraud or abuse
  • To comply with legal obligations

Cookies and Tracking

Essential Storage (No Consent Required)

We use localStorage (not cookies) for basic analytics that doesn't require consent:

  • _arktis_aid - Anonymous visitor ID
  • _arktis_sid - Session ID

Analytics Cookies (Consent Required)

With your consent, we set cookies for enhanced tracking:

  • _arktis_id - Persistent visitor cookie (1 year)
  • _arktis_sid - Session cookie (24 hours)

Session Recordings

Session recordings capture how users interact with a website (clicks, scrolls, page navigation). This feature:

  • Only activates after explicit consent
  • Automatically masks sensitive input fields (passwords, credit cards)
  • Can be configured to block specific elements
  • Is stored for a maximum of 90 days

Data Sharing

We do not sell your personal data. We may share data with:

  • Service providers: Cloud infrastructure (Google Cloud), payment processing
  • Legal requirements: When required by law or to protect our rights
  • Business transfers: In case of merger, acquisition, or sale of assets

Third-Party Integrations

When you connect advertising platforms like Facebook Ads to your Arktis account, we access campaign data via their APIs to provide attribution analytics and performance insights.

  • We only request the minimum permissions needed (ads_read, ads_management for Facebook)
  • Access tokens are stored securely and encrypted
  • We never access or store your ad platform passwords
  • You can disconnect integrations at any time from your account settings
  • Data synced from ad platforms is subject to the same retention policies as other analytics data

Your Rights (GDPR)

If you're in the EU/EEA, you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate personal data
  • Erasure: Request deletion of your personal data
  • Portability: Receive your data in a structured format
  • Object: Object to processing of your personal data
  • Withdraw consent: Withdraw consent at any time

To exercise these rights, contact us at privacy@arktis.so.

Data Retention

  • Analytics data: Retained for 2 years, then aggregated or deleted
  • Session recordings: Automatically deleted after 90 days
  • Account data: Retained while account is active, deleted within 30 days of account closure

Security

We implement industry-standard security measures including encryption in transit (TLS) and at rest, access controls, and regular security audits. Our infrastructure is hosted on Google Cloud Platform in EU data centers.

International Transfers

Your data is primarily stored in the European Union. If data is transferred outside the EU, we ensure appropriate safeguards are in place (Standard Contractual Clauses or adequacy decisions).

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or by posting a notice on our website.

Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: