Privacy Policy

Last updated: October 18, 2026

UserProof is a tool for website owners. A Claude Code plugin and a small JavaScript snippet record how visitors use a site, so the owner can find and fix what makes people leave. This policy covers two groups: site owners who create accounts, and visitors of sites that run the snippet.

Site owners

When you create an account we store your email address, the sites you register, and billing state if you upgrade. Payments are processed by Stripe. We never see your card number.

What the snippet records on visitor sessions

The snippet records behavior events: page views, clicks, scroll depth, text selected or copied on the page, keyboard shortcuts such as Ctrl+F (the shortcut, never what was typed), form field focus and abandonment, validation failures, JavaScript errors and timing. Page addresses are recorded without their query string or hash.

For form fields we record the field type, name and label, how long it had focus, and whether it contained anything. We do not record what was typed. Text selected inside a form field is never recorded. Password fields are always excluded.

Text a visitor selects or copies elsewhere on a page is recorded, capped at 200 characters for copies. Site owners can add the data-exclude attribute to any element, or list selectors in the script tag's own data-exclude attribute. Inside those areas, clicks keep their position and element but the text becomes "[masked]", and selections, copies, mouse movement and form-field events are not recorded.

Identifiers and cookies

The snippet stores a random anonymous visitor ID in the browser's localStorage and a session ID in sessionStorage. It sets no cookies. It does not fingerprint devices and does not track visitors across different websites. Clearing site data in the browser removes both IDs.

Bots

Traffic from bots and browser automation is dropped when events arrive.

How the data is used

Recorded events are counted into metrics such as dead clicks, rage clicks, errors and slow responses. Those counts come from the events themselves. AI models write the explanations and suggested fixes for the site owner. Visitor data is not sold and is not shared with third parties for advertising.

Retention and deletion

Raw events are kept for 30 days. Site owners can delete a site and its data on request. A visitor who wants their data removed from a site that uses UserProof can ask through the contact link below, and we will handle it with the site owner. Please do not put personal details in a public issue. Ask for a private way to continue and we will arrange one.

Subprocessors

We use Hetzner (servers and database, in Germany), Vercel (this website) and Stripe (payments). Each processes data only as needed to run the service. Findings are computed from recorded events by our own code. We don't send event data to any AI provider; your own coding agent (for example Claude Code) reads the findings it fetches with your key.

Contact

Questions or deletion requests: open an issue at github.com/rdoyle99/userproof/issues.