Privacy Policy

Last updated: July 8, 2026

1. Who We Are

UmamiEngine ("we", "us", "our") provides managed hosting of Umami analytics software. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or use our service.

2. Information We Collect

2.1 Account Information

When you register for an account, we collect your email address and any additional information you provide during registration or account setup.

2.2 Billing Information

When you subscribe to a paid plan, payment processing is handled by Stripe. We do not store full credit card numbers on our servers. Stripe may share billing details (such as your name, email, and billing address) with us for record-keeping purposes. See Stripe's Privacy Policy for more information.

2.3 Usage Data

We automatically collect certain information when you visit our website or use the dashboard, including your IP address, browser type, operating system, referring URLs, and pages viewed. We use this data to operate, maintain, and improve our service.

2.4 Communications

If you contact us via email or support channels, we retain your messages and contact information to respond to your inquiries.

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the UmamiEngine service
  • Process transactions and send billing-related communications
  • Send service-related announcements, updates, and technical notices
  • Respond to support requests and customer inquiries
  • Detect, prevent, and address fraud, security, or technical issues
  • Comply with legal obligations

4. Analytics Data (Your Data)

Your website analytics data — including page views, visitor counts, referrers, device information, and other metrics collected by the Umami software — belongs entirely to you. We do not:

  • Access your analytics data except to provide technical support or maintain the service
  • Sell or share your analytics data with third parties
  • Use your analytics data for any purpose other than delivering the service to you

Your Umami instance is isolated and your data is stored in its dedicated database. Umami itself is designed to be privacy-first and does not use cookies by default.

5. Data Retention

We retain your account information for as long as your account is active. Upon account cancellation, your analytics data and account information are deleted within 30 days unless we are required to retain certain information for legal or tax purposes. Billing records may be retained for up to 10 years as required by tax regulations.

6. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

  • Service Providers: Third-party vendors who help us operate the service (e.g., Stripe for payment processing, Hetzner for cloud infrastructure). These providers are contractually bound to protect your data.
  • Legal Compliance: When required by law, court order, or governmental regulation, or to protect our rights and safety.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

7. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS) and at rest, regular security updates, and access controls. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

  • Right to Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure: Request deletion of your personal data, subject to legal retention requirements.
  • Right to Restrict Processing: Request restriction of processing in certain circumstances.
  • Right to Data Portability: Request transfer of your data to another service provider where technically feasible.
  • Right to Object: Object to processing of your personal data for direct marketing purposes.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Third-Party Links

Our website and service may contain links to third-party websites. We are not responsible for the privacy practices of these third parties.

10. Children's Privacy

Our service is not intended for children under 16. We do not knowingly collect personal information from children. If we learn we have collected data from a child under 16, we will delete it promptly.

11. International Data Transfers

Your data may be transferred to and processed in countries outside the EEA. When such transfers occur, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) where required.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or through the Service. We encourage you to review this policy periodically.

13. Contact

For questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: [email protected]