Data and deletion
Your sites' visits and requests are yours. This page says where they live, how long each part is kept, and how to get them out or delete them. The Privacy Policy is the full account.
Where it lives
On Cloudflare, in eastern North America: visits, requests, check results and your account. A copy of the database is made every night and kept for 30 days. The Privacy Policy lists exactly what is where.
How long it's kept
- Each page a visitor opened, and each tap or form sent: 90 days.
- Each day's totals per site, which the 12-month view and the year before read: 25 months.
- Sent requests: until you delete the site or your account, or the person deletes their own.
- Answers never sent: 30 days after the person last touched them. A count of where they stopped stays, with no answers or contact details, so your quote form's figures don't change.
- The weekly checks: what a check found, once fixed, and accessibility results, 90 days; speed figures, 13 months.
- Sign-in links: 15 minutes. Signed-in sessions: 30 days.
- Deleted data can stay in the nightly copies for up to 30 more days, then it's gone.
When a plan ends, nothing is deleted early: everything above stays readable for its usual time, and the site keeps counting for 30 days.
Getting it out
On a site's requests list (All requests, from the main page), each form has its own CSV export: one row per request, sent ones first, then unfinished ones, with when it was sent, a column per question, the estimate and what it was worked out from, and the pages the person looked at.
When someone asks to be deleted
Every estimate email ends with Delete my data. It deletes that person's request, takes it out of your counts, and Wunderly never emails that address again. If someone asks you instead, write to privacy@usewunderly.com with the form and their email and we'll delete it; they can write there themselves too. A visitor who never sent a form can't be found: the key that counted them can't be traced back to them.
Deleting a site
A site's settings end with Delete site (not your only one). It comes off your plan first, then its forms, requests, visits, totals, checks and reports all go, a chunk at a time, usually within minutes.
Deleting your workspace
Settings ends with Delete workspace. It deletes every site and everything in them, and your account. A paid plan is cancelled with Paddle first. What's kept is one line saying a workspace was deleted, with counts and no content.
On people's devices
The script sets no cookies and stores nothing on visitors' devices. The one thing a form keeps is the token that lets someone pick up where they left off, on the form's own site, and it's removed when they send the form (Privacy on your site).