Insights collects some data from users in order to provide analytics services. We respect you and your users' privacy as much as feasible, and all requests are anonymized. We only collect what is really needed.
For all incoming requests, we hash IP addresses and keep them stored for a short time in memory (RAM). They are not stored in the DB nor do they show up in any logs, not even hashed. This is done for fraud prevention reasons. Your users IPs will not appear in any analytics nor will anybody (not even us) have access to them.
When requested in the call to track event, we collect device dimensions rounded up to the nearest 50px, and store them. This is done to provide some measure of anonymization to your users while still allowing you to know which resolutions are the most popular, so that your app can be properly tested and displayed.
When requested in the call to track event, we store URLs and parameters in order for you to know where your users are coming from.
We honor the Do Not Track header.
For all incoming requests, We collect and store the last timestamp. This is required to identify unused event parameters and trim irrelevant data.
When requested in the call to track event, we extract and store the browser and/or operating system from the user agent. We do not store - nor log - the user agent itself.
Insights uses services from Google's Firebase in order to provide some of our services. Here is a list of the data collected by them, extracted from Firebase's Privacy Policy.