What we collect. What we never collect.
Citealytics is cookieless by design. There is nothing to consent to, because we never store anything that can identify a person. Your data stays in the region you pick — EU or US.
What we collect
- Page path (e.g. /pricing)
- Referrer domain
- User agent string (server-side, for AI-bot classification)
- Country, derived from IP at request time — the IP is never stored
- Device type and browser family
- Screen size bucket
- Timestamp of the request
What we never collect
- Cookies of any kind — first or third party
- Personal data or anything that identifies a visitor
- IP addresses in storage or logs
- Cross-site or cross-device profiles
- Fingerprints built from canvas, fonts or audio
- Data sold or shared with ad networks
How AI attribution works
Each request is matched against a curated registry of AI-crawler signatures: user-agent tokens (GPTBot, OAI-SearchBot, ClaudeBot, PerplexityBot, Google-Extended and more), regular expressions, and published IP ranges. Matching happens server-side on data we already receive — no extra tracking is required. Requests that send DNT: 1 are dropped before anything is written.