Compliance
What VisitLead measures. And what it never does.
VisitLead is built for the Swiss FADP, the European GDPR and the US CCPA. The rules apply according to each visitor's country, with no setup on your side.
Measured
- Which company, school or public body is visiting, based on its network
- Pages viewed, how many and when
- The referring domain and utm_* parameters
- The return of a contact you already know, where the law allows it
Never
- Identifying an unknown person
- Storing the IP address, even for a day
- Tracking a person from one site to another
- Buying or selling personal data
Country by country
Global Privacy Control or Do Not Track: no cookie, anywhere.
| Visitor's country | Company | _vl cookie (known contact) | Legal basis |
|---|---|---|---|
| European Union, EEA, United Kingdom | Yes, IP never stored | After consent | GDPR art. 6(1)(f) and ePrivacy Directive |
| Switzerland | Yes, IP never stored | Notice and right to object, or consent if you choose | TCA art. 45c and FADP |
| United States | Yes, IP never stored | Yes, unless GPC or opt-out | CCPA and CPRA (notice and opt-out) |
| Other countries | Yes, IP never stored | Same as the European Union | Strictest rule |
The journey of an IP address
With the page view, as on any website.
In memory, just long enough to find the network in public registries.
No database, no log, no backup. What remains is a company, or nothing.
Retention
- Visits, page views and alerts: 12 months, then deleted automatically.
- _vl cookie: first-party, 12 months at most, only where the country's rules allow it.
- Daily fingerprint: its secret is deleted after 48 hours.
- Global Privacy Control or Do Not Track signal: no cookie and no form read, anywhere.
Who is responsible
On your site, you are the controller and VisitLead is your processor (“service provider” under the CCPA). The data processing agreement is part of our terms, no separate signature needed. In the app, you will find template texts for your privacy notice, in 5 languages, and a legitimate interest assessment template.
Opt out, in one click
- On a client site: the #visitlead-optout link stops all tracking in that browser.
- In the browser: Global Privacy Control is respected everywhere.
- For all clients at once: the Stop being recognized page, with email confirmation.
Hosted in Frankfurt (EU). Publisher: Quantum Liquid LLC.