1. What is collected
Anysite stores what it needs to run: account name, email, hashed password, role, sign-in timestamps and IP address of the last sign-in. Site files live on disk. Page metadata, revisions, messages and settings live in one SQLite file on this server.
For public sites, page views are counted with the site, the path, the time and a salted hash of the visitor's IP address. The raw IP is not stored with the view. A session cookie keeps a signed-in editor signed in; visitors to a site get only the cookies that site sets itself.
2. What is not collected
No analytics service, no advertising pixels, no cross-site tracking, no telemetry sent to the authors of this software. The admin loads its fonts from Google Fonts; site pages load only what their own files reference.
3. Why it is held
Accounts and activity logs exist so the operator can give access, investigate abuse and restore a file from history. View counts exist so an owner can see whether a page is being read. Nothing is used for profiling or sold.
4. Who can see it
Administrators of this install can see accounts, activity and — for public sites — the safety scanner's matches. Other editors see only the sites they work on. Nobody outside the server sees the database unless the operator exports it.
5. Retention and deletion
Revisions are capped per file and old view rows can be pruned with php bin/prune-views.php. Deleting an account removes the account and its inbox; delete a site to remove its files. Backups, if the operator keeps them, are outside the application and must be deleted separately.
6. Your choices
You can ask the operator for a copy of your account data, ask for it to be corrected, or ask for the account to be closed. Contact: [email protected].