Privacy Policy

Last updated: 1 July 2026. This is a template describing how the Mia Analytics service is designed to work; the operator of each site is the data controller for their own visitors and should adapt this into their own published policy.

1. Who we are

Mia Analytics is a web and product analytics service operated as part of the Mia Bazo family of products. When a website or application embeds Mia Analytics, that site's operator is the data controller and Mia Analytics acts as a data processor on their behalf.

2. What we collect

For each tracked event (a pageview, a custom event, or a server-side business event) we may record:

• Event type and name, and the time it occurred.
• Page URL and path, the referring URL, and UTM campaign parameters.
• A hashed visitor and session identifier (unless cookieless mode is used — see below).
• A salted hash of the visitor's IP address, used for counting. The raw IP address is only retained if the site operator explicitly enables it, for a limited period.
• Approximate location (country, city) and the organisation or ISP that owns the IP block, derived from the IP at collection time.
• Browser user-agent and preferred language.
• Any custom properties the site operator chooses to send with an event.

3. Cookies & consent

Mia Analytics supports three consent models, chosen per site:

• Built-in banner — a visitor is shown an Accept / Reject choice, and nothing is tracked until they accept. A first-party bec_vid cookie (up to 12 months) counts returning visitors; a session value lives only for the browser session.
• Your existing consent tool — Mia Analytics reads the site's own consent cookie and honours changes to it, so no second banner appears.
• Cookieless mode — no cookies are set at all. Visitors are counted server-side using the salted IP hash. This is designed to be compatible with PECR-style rules that permit strictly-necessary, privacy-preserving measurement.

4. How data is protected

• IP addresses are hashed with a per-site salt, so hashes cannot be correlated across different sites.
• Automated bots, crawlers and cloud health-probes are filtered out at collection.
• Data is transmitted over HTTPS and stored in a first-party database controlled by the operator.

5. Retention

Raw event data is retained for a configurable window and can be aggregated into daily rollups so long-term trends survive without keeping row-level detail. Raw IP retention, where enabled, is time-boxed and can be switched off entirely.

6. Sharing

Mia Analytics does not sell data, and does not share it with advertising networks or third-party data brokers. Data is used solely to provide analytics to the site operator.

7. Your rights

If you are a visitor to a site that uses Mia Analytics and wish to exercise data-protection rights (access, deletion, objection), please contact that site's operator, who is the controller of your data. Where we assist as processor, we will support the operator in responding.

8. Contact

Questions about this policy or how Mia Analytics processes data? Email info@miabazo.com or visit our contact page.