Last updated: September 8, 2026
This policy explains how Orbit handles personal data when you visit orbitanalytics.app, create or use an account, contact us, receive a business communication from us, or visit a website that uses the Orbit tracking script.
Orbit is the controller of account, billing, support, website, and business outreach data processed for its own purposes. You can contact the controller at hello@orbitanalytics.app or by post at Via Vignola 3, 20136 Milan, Italy.
For analytics collected from a customer's website, that customer normally decides why and how analytics is used and acts as the controller. Orbit processes that data on the customer's instructions as a processor. Questions about a particular website's use of analytics should first be directed to that website's owner.
When you create or use an account, we process your email address, hashed password (unless you use Google sign-in), account and team identifiers, websites and domains you add, settings, subscription status, and the content of support or contact-form messages. We also process limited request and security information needed to authenticate users, prevent abuse, and operate the service.
If you choose Google sign-in, Google provides your email address, name when available, and Google account identifier. Authentication codes and access tokens are used to complete sign-in and are not used by us for advertising.
Polar processes checkout and payment information. We receive the customer, product, and subscription information needed to activate and manage your plan. We do not receive or store your complete payment-card number.
When a website owner installs the Orbit script, the service may collect the page URL and title, hostname, referrer, timestamps, language, screen size, browser, operating system, device type, approximate country, region and city, campaign parameters, performance metrics, and events or properties configured by the website owner.
An IP address and user-agent string are processed transiently to provide approximate location information, detect abuse, and generate a salted, rotating identifier. Raw IP addresses are not stored in the analytics database, and the generated identifier is not designed to reveal the original IP address. The rotation period may vary with service configuration.
A website owner may separately enable session replay or heatmaps. These features can process page structure and changes, cursor or tap activity, clicks, scrolling, viewport dimensions, and other on-page interactions. Session replay reconstructs interactions from recorded browser events; it is not a video recording from your camera or device.
Website owners control whether these features are enabled, their sampling rates, masking level, and blocked page elements. They are responsible for configuring exclusions, providing any required notice, and establishing an appropriate legal basis before using these features on pages that may contain personal or sensitive information.
For limited, targeted business outreach, we may process professional contact details, role, company, website, country, the public source of the information, our correspondence, and whether the recipient has opted out. We obtain this information from the recipient, their organisation, referrals, or publicly available professional and business websites. We do not use purchased bulk consumer lists. Recipients may object at any time by replying to the message or emailing hello@orbitanalytics.app.
When a customer uses Orbit to analyse its own website, the customer determines the legal basis for processing its visitors' data.
The analytics tracking script does not set cookies. The Orbit dashboard uses browser local storage for the authentication token that keeps account holders signed in and for preferences such as theme, language, timezone, and dashboard configuration. We do not use third-party advertising cookies or cross-site advertising trackers. More information is available in our Cookie Policy.
We use service providers only as needed to operate Orbit, including:
We may also disclose data to professional advisers, competent authorities, or other parties when reasonably necessary to comply with law, protect rights or security, or complete a corporate transaction. We do not sell personal data or share it for cross-context behavioural advertising.
Some providers may process data outside Italy or the European Economic Area. Where GDPR transfer restrictions apply, we rely on an adequacy decision or appropriate safeguards offered by the provider, such as the European Commission's Standard Contractual Clauses. You may contact us for more information about safeguards relevant to your data.
Residual copies may remain in restricted backups until those backups are overwritten under the applicable provider's normal retention cycle.
We use technical and organisational measures intended to protect data, including access controls, encrypted connections, hashed passwords, limited service credentials, and data minimisation. No online service can guarantee absolute security.
Depending on where you live, you may have rights to access, correct, delete, restrict, or receive a portable copy of your personal data, and to object to certain processing. Where processing is based on consent, you may withdraw consent without affecting processing already carried out. You have an unconditional right to object to direct marketing.
Account holders can delete their account from account settings. To make another request, email hello@orbitanalytics.app. We may need to verify your identity before completing a request. If Orbit processes analytics only on a customer's instructions, we may direct the request to that customer.
You may also lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali, or with your local supervisory authority.
We do not use personal data to make solely automated decisions that produce legal or similarly significant effects. Orbit is a business service and is not directed to children.
We may update this policy as the service or applicable requirements change. We will post the revised policy here with a new effective date and provide additional notice when a change materially affects how we use personal data.
Email: hello@orbitanalytics.app
Postal address: Via Vignola 3, 20136 Milan, Italy