Last updated November 4, 2026.
This policy explains what WhoVisitedMySite ("we", "us") collects, why, and the choices you have. WhoVisitedMySite is a website visitor-identification service based in Charleston, SC. Businesses ("customers") add our pixel to their websites to learn which people and companies visited.
Who this policy covers
- Customers: businesses that sign up, pay for, and use WhoVisitedMySite.
- Website visitors: people who visit a customer's website where our pixel is installed, and people who visit whovisitedmysite.com.
Data we collect
- Account and billing data (customers): name, business email, company, website domains, and plan. Payments are processed by Stripe; we do not store full card numbers.
- Pixel and device data (visitors): pages viewed, referring page, visit time and frequency, IP address, browser and device type, and cookie or similar identifiers.
- Matched contact and firmographic data (visitors): where a visit can be matched to a record, we may provide the customer with a name, business or personal email, job title, company details, city and state, and, on our Pro plan, mobile numbers with Do Not Call status and a mailing address. This data comes from our identity-resolution and data partners, who obtain it from their own sources.
- Communications: messages you send us, including form submissions and privacy requests.
Cookies and the pixel
Our pixel is a small script that customers place on their websites. It sets or reads cookies and similar identifiers and sends visit information to us and our identity-resolution partners so visits can be matched to known records. Our own website uses the same pixel to test the product, plus essential cookies needed to run checkout and your account. You can block or delete cookies in your browser settings, and you can ask us to stop identifying you at any time (see "Your choices").
How we use data
- To provide the service: identify visitors, show pages viewed, match visitors to a customer's CRM, flag Do Not Call status, and send alerts and digests.
- To run accounts, billing, usage limits and overage, and customer support.
- To secure the service, prevent fraud and abuse, and comply with law.
- To improve the product, using aggregated or de-identified data where possible.
Customers' duty to disclose tracking
Customers who install our pixel are responsible for telling their own visitors about it. Each customer must keep an accurate privacy notice on its website that describes the use of cookies, pixels and visitor identification, provide any consent banner or opt-out required where its visitors live, and honor opt-out requests. Customers must use visitor data in line with applicable law, including the TCPA, Do Not Call rules, CAN-SPAM, and state privacy laws.
Your choices and opt-out
If you visited a website that uses WhoVisitedMySite and want us to stop identifying you, or want your information removed, use our opt-out form or email support@whovisitedmysite.com. We will add your details to our suppression list so they are not provided to customers going forward. You can also opt out of marketing emails using the unsubscribe link in any email.
California and other state privacy rights
Depending on where you live (including California under the CCPA/CPRA, and states such as Virginia, Colorado, Connecticut, Utah, Texas and Oregon), you may have the right to know what personal information we hold about you, to access or get a copy of it, to correct it, to delete it, to opt out of the sale or sharing of personal information and of targeted advertising, and to limit use of sensitive personal information. You will not be discriminated against for using these rights. To make a request, use the opt-out form or email support@whovisitedmysite.com. We may need to verify your identity, and an authorized agent may submit a request for you with proof of authority. We aim to respond within 45 days. If we deny your request, you can appeal by replying to our response.
Sale of data and sensitive data
Providing identified visitor information to customers may be considered a "sale" or "sharing" under some state laws; you can opt out as described above. We do not sell sensitive personal information, such as precise geolocation, health, financial account, government ID, racial or ethnic origin, religious beliefs, or sexual orientation data, and we do not knowingly collect data from children under 16.
Where we don't identify visitors. We only identify visitors located in the United States. We don't identify visitors located in California. We don't identify visitors on pages about health or medical topics, legal matters, adult content, or similar sensitive subjects, and customers can exclude other pages.
Global suppression. When you opt out or ask us to delete your data, we add you to a suppression list that applies to every customer, delete your stored visitor records, and stop identifying you for any customer.
Who we share data with
- Customers, for visits to their own websites.
- Service providers that help us run the service (hosting, identity resolution, email delivery, payments, analytics), under contracts that limit their use of the data.
- Authorities, when required by law or to protect rights and safety.
- A buyer or successor, if our business is sold or merged.
Retention
We delete identified visitor data 90 days after it is collected, and we delete a customer's visitor data after that customer's access ends when they cancel. We keep account and billing records for as long as the account is active and then as required for tax, accounting and legal purposes. Suppression records from opt-out requests are kept so we can continue to honor them.
Security
We use encryption in transit, access controls, encrypted storage for sensitive settings, and reputable infrastructure providers. No system is perfectly secure, and we will notify affected people and authorities of a breach as required by law.
Changes
We may update this policy. We will post the new version here and update the date above, and tell customers about material changes by email.
Contact
WhoVisitedMySite, Charleston, SC. Email support@whovisitedmysite.com.