COUNTERNEST

Privacy Policy

CounterNest · Nigeria

Updated 1 October 2026

Who this notice covers

CounterNest provides visitor analytics and website monitoring. This notice explains how CounterNest handles account and service data. Contact support@counternest.com about privacy, access, correction or deletion requests. We may ask for information needed to verify that you control the account or website concerned; never send a password or authentication code.

Information processed

Account information includes your name, email address, password hash, email verification status and service preferences. Optional two-factor authentication uses an encrypted authenticator secret and encrypted hashes of recovery codes. We also process security and administrative activity records.

Counters receive a pseudonymous browser identifier, visited page address and title, referring domain, approximate country, browser, operating system, device category, campaign attribution, timestamps and scroll/activity measurements. The application strips query strings from stored page addresses, while storing campaign attribution separately. IP addresses may be processed transiently for approximate country lookup and may occur in hosting or security logs; they are not stored in visitor-event records.

Monitors process target website addresses, HTTP responses, response times, incident history and configured alert destinations. Browser notifications use subscription endpoints and encryption keys when you opt in.

Why information is used

We use information to provide requested accounts, analytics and monitoring; deliver verification and service alerts; investigate abuse; maintain security; and respond to support requests. Where applicable law requires consent for tracking or optional notifications, the website owner must obtain it before enabling the relevant feature. Account and security processing may be necessary to provide the service or protect it, subject to applicable law.

Public reports and website owners

Counter reports can be public. A public report may reveal page paths, page titles, referring domains and traffic patterns. Counter owners can change report visibility. Do not track pages whose URLs or titles contain sensitive personal information. Public monitor status pages are optional; management links must remain private.

A website using CounterNest is responsible for explaining its own tracking, selecting an appropriate legal basis, and handling its visitors' requests. Contact that website first for questions about its use of a counter. CounterNest can assist with requests relating to data it holds.

IP tools and browser extension

The IP lookup and IP widget process an address to return available country and network information. A visitor IP widget shows that visitor their own address; it does not add raw IPs to counter reports. Lookup addresses may be present in hosting access logs.

The browser extension stores selected counter IDs and recent results on the user's device. It requests public counts from CounterNest and displays the last-check time. It does not read browsing history or inject tracking into other pages. The extension's IP lookup runs only when requested.

Providers and sharing

Hosting and configured email providers process information needed to run the service. Browser push uses the browser's push provider. When reputation checking is configured, monitored URLs are sent to Google Web Risk. Approximate country lookup uses the configured local geolocation database. Data may be processed in the locations used by these providers; the operator must assess applicable transfer requirements before selecting them.

We do not provide a facility to sell visitor records. Information may be disclosed when required by applicable law or necessary to investigate misuse, subject to appropriate safeguards.

Storage and retention

The default detailed-traffic retention is 30 days and can be changed by the administrator. Scheduled maintenance converts older traffic into daily aggregates, which may be retained longer. Sent notification messages are normally removed after 14 days. Account, monitor, incident, audit, backup and hosting-log retention depends on continued service needs and the operator's maintenance policies; deletion from backups may follow their rotation schedule.

Your choices and rights

You can turn off weekly digests, revoke browser notifications, stop using a counter and request account or data deletion. Depending on applicable law, you may have rights of access, correction, deletion, objection, restriction, portability or withdrawal of consent, and a right to complain to your local data protection authority. Withdrawal does not undo processing already lawfully performed.

Security and changes

We use measures including access controls, encrypted secrets, password hashing, verification codes and optional two-factor authentication. No internet service can guarantee complete security. Material changes to this notice will be reflected on this page. Contact support@counternest.com if you need clarification.