Last updated: July 29, 2026 · Operator: Is Your Traffic Real (“we”, “us”, “our”) · Site: isyourtrafficreal.com · Contact: hello@isyourtrafficreal.com
This Privacy Policy explains how we collect, use, disclose, and retain information when you use our website, dashboard, JavaScript tracker (t.js), and related collection endpoints (collectively, the “Service”).
Account holders (site owners). If you create an account and install our script on websites you control, you are typically the controller of end-visitor data for those sites. We process technical visit data on your behalf to provide the dashboard, and we also process certain data as an independent business for the purposes described below (including product improvement and commercial use of aggregated / de-identified data).
End visitors. If you visit a third-party website that embeds our script, that site’s owner chose to install the tool. Their privacy policy also applies. We receive technical data about the visit as described here.
A. Account information. When you sign in with Google we receive identifiers Google provides, typically your Google account ID, name, email address, and profile image. We store session cookies so you stay logged in.
B. Site configuration. Domains, labels, and site keys you create in the dashboard.
C. Tracking / analytics data from embedded script. When our script runs on a page, we may process:
_iytr)We do not intentionally collect payment card numbers, government IDs, or passwords through the tracker. The free product is not designed to collect form field contents (names, emails typed into forms) unless a future feature is clearly disclosed and configured.
Marketing note. Our public website describes a free traffic-quality tool. This Policy is the controlling disclosure for commercial data use. We do not rely on vague “improve our services” language alone for resale of aggregates — that use is stated explicitly here.
Dashboard (isyourtrafficreal.com). We use a session cookie (iytr.sid) for authentication.
Script on your sites. The tracker may set a first-party cookie on the host domain (_iytr) to recognize a browser session across pages for up to about 30 days. That cookie stores a random identifier, not your Google account credentials.
Where laws require consent for non-essential cookies or similar technologies, site owners who embed the script must provide notice and obtain consent from their visitors before or at collection, as required in their jurisdictions (including GDPR/ePrivacy and similar rules).
Where the GDPR/UK GDPR applies to our processing as a controller, we rely on: (a) contract / steps prior to contract for account features; (b) legitimate interests in securing the Service, preventing fraud/abuse, measuring product usage, and commercial analytics on aggregated/de-identified data; and/or (c) consent where required (including where site owners obtain consent for optional analytics cookies). Site owners remain responsible for their own legal bases for deploying the script.
We may share information with:
California / similar US state laws. Depending on definitions of “sale” or “sharing” under the CCPA/CPRA and similar laws, our commercial licensing of certain data may be considered a sale or share of personal information if identifiers such as IP address remain associated. We aim to provide dashboard value using technical data and to commercialize primarily aggregated/de-identified products. You may request opt-out of sale/share of personal information by emailing hello@isyourtrafficreal.com with the subject “Do Not Sell or Share My Personal Information.” We will not discriminate against you for exercising privacy rights.
We do not knowingly sell personal information of children under 16.
Account data is kept while your account is active and for a reasonable period afterward for security and legal compliance. Event-level tracking data is retained while useful for the dashboard and our analytics pipeline; we may aggregate, de-identify, or delete older event rows over time. You may request deletion of your account and associated site configuration by contacting us. Deletion of already de-identified aggregates may not be feasible.
We use reasonable administrative and technical safeguards (HTTPS, access controls, least-privilege practices). No method of transmission or storage is perfectly secure.
We may process data in the United States and other countries where we or our providers operate. Where required, we use appropriate transfer mechanisms.
The Service is not directed to children under 13 (or under 16 where stricter rules apply). We do not knowingly collect account data from children.
Depending on where you live, you may have rights to access, correct, delete, or export personal information, to object or restrict certain processing, or to withdraw consent. Account holders can manage sites in the dashboard. Privacy requests: hello@isyourtrafficreal.com. We may need to verify your request. You may appeal a denial by replying to our decision email. You may also contact your local data protection authority.
Browser “Do Not Track” is not uniformly standardized; we do not currently alter core collection solely based on DNT. Where Global Privacy Control (GPC) or similar legally recognized opt-out signals apply to our processing as a business for sale/share, we will honor them as required for covered personal information.
We may update this Policy. We will change the “Last updated” date and, for material changes, provide additional notice when appropriate (for example a banner or email to account holders).
Is Your Traffic Real · Email: hello@isyourtrafficreal.com · Web: https://isyourtrafficreal.com
Questions: hello@isyourtrafficreal.com