Privacy Policy

Overview

Clamp (“we”, “us”, “our”) provides analytics services at clamp.sh. This policy explains what data we collect, why we collect it, and how we handle it.

Data we collect about you

When you create an account, we store:

• Email address and hashed password
• Workspace name
• Billing information (processed by Stripe, never stored by us)
• Marketing communication preference (opt-in at signup)

Data collected by the SDK

When your visitors interact with a site using Clamp's tracking SDK, we collect:

• Page URL and referrer
• Browser type and viewport size (from the User-Agent header)
• Country (derived from IP address, then the IP is discarded)
• Custom events and properties you explicitly send

We do not use cookies. We do not track users across sites. We do not sell or share visitor data with third parties. IP addresses are resolved to a country-level location and immediately discarded. No raw IPs are stored.

How we use your data

• To provide and operate the Clamp service
• To display analytics in your dashboard and MCP server
• To process payments and manage your subscription
• To send product updates and offers (only if you opted in)
• To respond to support requests

Data retention

Analytics event data is retained according to your plan: 3 months (Free), 12 months (Pro), or unlimited (Growth). Account data is retained for as long as your account exists. When you delete your account, all associated data is permanently removed within 30 days.

Third-party services

• Stripe processes payments. Their privacy policy is at stripe.com/privacy.
• GitHub is used for optional social authentication.
• Vercel hosts the web application.

We do not use Google Analytics, Meta Pixel, or any other third-party tracking on clamp.sh itself.

Cookies

We use a single session cookie to keep you signed in. We do not use tracking cookies, advertising cookies, or any third-party cookies. The SDK installed on your users' sites does not set any cookies.

Your rights

You can:

• Delete your account and all associated data
• Opt out of marketing communications at any time
• Request a copy of all personal data we hold about you

For any privacy-related requests, email privacy@clamp.sh.

GDPR

If you are in the European Economic Area, we process your data under the legal bases of contractual necessity (to provide the service) and legitimate interest (to improve the product). Marketing emails are sent only with your explicit consent. You have the right to access, rectify, erase, and port your data, and to lodge a complaint with your local data protection authority.

Changes

If we make material changes to this policy, we will notify you by email (if you have opted in to communications) and update the date at the top of this page.

Contact

Questions? Email privacy@clamp.sh.