Privacy & DPA

What we collect, what we keep, and for how long.

Last updated October 26, 2026

On your website

SenseGap records requests to your site from bots and AI agents, and visits that arrive from AI assistants. For each request we receive the time, the page, the response status, the user agent, the referrer and the IP address.

We don't set cookies, run scripts in your visitors' browsers or build profiles of people.

IP addresses

The full IP address is used only for a moment, to check whether a bot is who it claims to be. Before anything is stored, the address is shortened: the last block of an IPv4 address is removed, and an IPv6 address is cut to its first 48 bits. The full address is never written to our database.

How long we keep it

Individual visit records are deleted after 90 days. Daily totals per page and per bot are kept so your history charts keep working. Ask us and we delete them.

Your account

We keep your email address and the sites you add, to run your account and send the reports you ask for. We don't sell data or share it with advertisers.

Where it runs

SenseGap runs on Cloudflare. Visit data is processed by Cloudflare Workers and stored in Cloudflare's databases.

Data processing agreement

If you need a DPA for your site's visitors, write to hello@sensegap.com and we'll send ours to sign.

Questions and requests

To see, export or delete your data, write to hello@sensegap.com.