Privacy Policy
Last Updated:
This Privacy Policy describes the privacy practices of Crazy Egg, Inc. (“Crazy Egg”, “we”, “us”, “our”) on our websites located at the domains crazyegg.com, crazyeggvcr.com, and crazyeggproxy.com, as well as such other websites or mobile applications that we own or operate (individually and collectively, “Our Website” or the “Crazy Egg Website”).
-
Scope of this Privacy Policy
As further discussed, below, data protection laws, regulations, and directives in certain jurisdictions distinguish between the rights and responsibilities of “Controller(s)” of personal information or data (“Information”), from those who are “Processor(s)” of such Information or data on the applicable controllers’ behalf. Crazy Egg is generally the controller of Information that it collects from and about the persons and entities who are visiting Our Website (“Crazy Egg Visitors”), and this Privacy Policy applies to Crazy Egg Visitors.
We also provide certain services to commercial persons and entities (each, a “Client” and collectively, “Clients”), who, in turn, own and operate their own websites or mobile applications (“Client Site(s)”), and who wish to utilize our code, software and services and reports (the “Service(s)”) to analyze how third party visitors to their Client Sites (“Client Site Visitor(s)”) use, interact with, and engage their Client Sites. The applicable Clients are the Controllers of Information collected from their Client Site Visitors, whether or not such information is accessed, analyzed, or otherwise utilized by or on behalf of the Client via the Service (“Client Visitor Information”); Crazy Egg is not the Controller of such Client Visitor Information. This Privacy Policy applies to the use of Services by our Clients. However, this Privacy Policy does not apply to the Client Sites themselves, nor to any Client Visitor Information. For any questions regarding the privacy, security, or other practices or policies on the Client Sites, please contact the applicable Client.
-
Information Collected from Crazy Egg Visitors
Device Information from Crazy Egg Visitors
We may receive and collect certain Information furnished by the visitor's browser or otherwise by their access device (“Device Information”), such as:
Browser Information
Operating System Information
Mobile Device Information (e.g., device identifier, mobile operating system, etc.)
IP address (stored in anonymized form)
Page Accessed
Geographic Location
Time of visit (by day, week, and duration)
Whether the visitor is a new or return visitor
Other such Information as may be delivered or shared by the applicable browser or access software or device.
Referral Information
We may also receive certain information regarding visitors from the prior website visited by such visitors (“Referral Information”). For instance, if a Crazy Egg Visitor navigates to the Crazy Egg Website from another website, Crazy Egg may receive certain information from the referring website (i.e., the last website the visitor visited before visiting the Crazy Egg Website) as part of the Hypertext Transfer Protocol ("HTTP") request. For example, if a Crazy Egg Visitor navigates to the Crazy Egg Website from a search engine, Crazy Egg may receive information contained in the referring URL for the applicable search query, such as the terms the Crazy Egg Visitor was searching for before visiting the Crazy Egg Website.
Registration Information from Crazy Egg Clients
When Crazy Egg Visitors register as Clients to use the Crazy Egg Service, register to use a trial version of the Crazy Egg Service, or request additional information about Crazy Egg, Crazy Egg may require Information, such as name, employer or company name, e-mail, mailing address, phone number, financial information (e.g., credit card number, billing address), and/or proposed Client Site to be tracked, to process the registration or request ("Client Registration Information").
Session Recording Information
We may use session recording software on the Crazy Egg Website. This software enables us to record Crazy Egg Visitors’ use, interaction, and engagement with the Crazy Egg Website. This software may capture user input, such as mouse and keyboard inputs and mobile gestures, and user views, such as browser or screen output. We use this software to help us optimize Crazy Egg Visitors’ experience. By using the Crazy Egg Website, you consent to our use of session recording software.
-
Crazy Egg’s Use of Crazy Egg Visitor Information
Crazy Egg may use Information of Crazy Egg Visitors, including Device Information and Referral Information of Crazy Egg Visitors and Client Registration Information, to:
authenticate Client’s access to the Crazy Egg Site, trial versions, or Service;
process and fulfill Client requests or purchases;
register Client accounts;
check the Crazy Egg Visitor’s qualifications for registration and/or to bill Crazy Egg Clients for the Services.
Crazy Egg may also use Client Information to:
provide Crazy Egg's products and Services, personalize and tailor your experience on the Crazy Egg Website;
operate our business;
understand how Clients are engaging with Crazy Egg Website and Service;
request additional information necessary to process or fulfill an order;
assess Client satisfaction with the Crazy Egg Service;
inform Clients that an upgrade is available; or to contact Clients with information about Crazy Egg, including information about new or existing products and services or special offers. For example, we may periodically send promotional materials or notifications related to our products and Services to the email address associated with a registered account.
Otherwise for our legitimate business interests.
-
Use of Cookies by the Service
As described in our Cookie Policy, the Service may utilize first-party cookies (small text files that Crazy Egg stores locally on a Client Site Visitor’s device) on Client Sites for one or more of the following purposes: to help identify whether a Client Site Visitor is a first time visitor, or has visited previously (provided that we will not store identifiers that can be used to personally identify such Client Site Visitors); assess usage patterns and perform traffic analysis; identify preferences; diagnose problems with our Service; analyze trends; and otherwise administer Crazy Egg products and services. Cookies placed by Crazy Egg on the computers of Client Site Visitors do not include Personally Identifiable Information such as name, phone number, e-mail address or mailing address, nor does Crazy Egg link cookies to such Personally Identifiable Information on our servers or databases.
For further information on our use of cookies, please see our Cookie Policy, which is incorporated in this Privacy Policy by this reference.
-
Information Collected by or on Behalf of Our Clients via the Service
Crazy Egg Clients use the Service to obtain information regarding how Client Site Visitors to their Client Sites are interacting with such Client Sites. This Service allows a Crazy Egg Client to evaluate and potentially modify its Client Site based on its findings regarding Client Site Visitors use and interaction with the Client Site.
Types of Client Visitor Information. Crazy Egg Clients may use the Service to collect, store, and analyze Client Visitor Information, on the Client’s behalf as the Controller of such Client Visitor Information, on Crazy Egg's servers, as the Client’s Processor of such Client Visitor Information. Such Client Visitor Information is transmitted in encrypted form, and pursuant to applicable data transfer provisions further described below. The Service may process such Client Visitor Information on behalf of the Client, to perform analyses and produce reports for the Crazy Egg Client. The interactions that may be recorded or analyzed (“Recorded Interactions”) may include mouse scrolls and clicks by a Client Site Visitor; and/or pages viewed or visited by a Client Site Visitor, including the duration of such visits. Recorded Interactions may also include images of the Client Site that are recorded during the Client Site Visitor’s interactions with such Client Site, such as, by way of example, images of forms displayed or populated by the Client Site Visitor on the Client Site, or other multimedia content that may be posted by Client Site Visitors. Such Client Visitor Information may also include Device Information and/or Referral Information from the Client Site Visitor. Client Visitor Information is provided to Clients in the form of aggregated reports and/or statistics that identify the collective behavior of Client Visitors to the Client's Site. Clients will also have access to Recorded Interactions through the Service.
-
Our Processing of Client Visitor Information.
As the Processor of Client Visitor Information, we will process Client Visitor Information only in compliance with the applicable Client’s instructions regarding the processing of Client Visitor Information, including any applicable terms, but subject to applicable laws and regulations regarding such Client Visitor Information, and as otherwise required by applicable law and regulations.
-
Crazy Egg Disclaimers Regarding Personally Identifying Information of Client Site Visitors.
Crazy Egg's Service is not designed to knowingly collect or extract from Client Visitor Information (including any Recorded Interactions or Device Information received from Client Sites through the Service) information that could be used to personally identify Client Site Visitors, such as a Client Site Visitor’s name, address or phone number ("Personally Identifiable Information") when a Client Site Visitor visits a Client Site that uses the Crazy Egg Service. Crazy Egg also generally prohibits Clients from collecting Personally Identifiable Information using the Service or otherwise providing Personally Identifiable Information of Client Site Visitors to Crazy Egg in connection with the Service.
-
Crazy Egg Does Not Collect Visitor Information Across Multiple Sites
Crazy Egg does not collect or aggregate information about visitor behavior on multiple, different websites.
-
Retention and Deletion of Client Visitor Information.
Crazy Egg will retain Client Visitor Information in accordance with the applicable Client’s instructions, including any applicable terms and as required by applicable law. Client agrees and acknowledges that the deletion of Client Visitor Information may affect the delivery or performance of the Service. Crazy Egg will comply with such instructions to delete Client Visitor Information as soon as reasonably practicable and within a maximum period of 180 days, unless applicable laws require retention or earlier deletion. Crazy Egg may retain Client Registration Information as long as necessary for the purposes described in this Privacy Policy and the other terms. This may include keeping Client Registration Information after the account has been deactivated as needed for Crazy Egg to pursue legitimate business interests, record keeping procedures, legal compliance, preservation of rights, security purposes, and enforcement of legal and contractual rights.
Client agrees and acknowledges that it will be responsible for exporting any Client Visitor Information or Client Registration Information that it wishes to retain following the termination of the terms
-
Crazy Egg's Sharing and Disclosure of Crazy Egg Visitor Information and Client Visitor Information.
This section describes the manner and extent to which Crazy Egg may share and disclose Information. Notwithstanding anything to the contrary below or elsewhere herein, as between a Client and Crazy Egg, the Client is solely responsible for its policies and practices for the sharing and disclosure of Client Visitor Information as the Controller of such Information.
Crazy Egg’s Default Policy Regarding Sharing of Client Visitor Information. Except to the limited extent described otherwise in this Privacy Policy, Crazy Egg never sells or shares any Client Visitor Information with individuals or companies other than the specific Client from whose Client Site Crazy Egg collected the Client Visitor Information.
Crazy Egg’s Default Policy Regarding Sharing of Client’s Personally Identifiable Information. With the exception of the limited circumstances discussed elsewhere in this Privacy Policy, Crazy Egg does not provide Clients' Personally Identifiable Information to third parties for any purpose.
Disclosure Pursuant to the Client’s Instructions. Crazy Egg will share and disclose Client Visitor Information in accordance with the applicable Client’s instructions, including any applicable Terms, and otherwise in compliance with but subject to applicable laws and regulations.
Subprocessors. We may utilize affiliates or third parties as subprocessors of the Information, to support the Services, and otherwise to support the conduct of our business, to provide, by way of example, service such as computing and storage services. We will use subprocessors subject to contracts that are substantially as protective of Personally Identifiable Information as those contained herein, and, to the extent applicable, in compliance with Article 28(3) of the European Union’s General Data Protection Regulation. For further information regarding our use of subprocessors, please contact us at [email protected].
Our Affiliates. We may share Information hereunder with our corporate affiliates provided that such affiliates are obligated, contractually or otherwise under applicable laws, to be bound by our obligations with respect to such Information.
Change of Control. If Crazy Egg, or substantially all of its assets, is acquired by another company or successor entity, the Information hereunder will be one of the assets transferred or acquired by the purchaser or successor. You acknowledge that such transfers may occur, and that any purchaser of or successor to Crazy Egg or its assets may continue to collect, use and disclose your Information as set forth in this policy.
Payment Processors. Like many companies that accept payment by credit card, Crazy Egg relies on third-party payment processors to process financial payments. When you make payments to Crazy Egg to obtain or use Crazy Egg's products or services, Crazy Egg may share Personally Identifiable Information, such as your name, address, and credit card information, with qualified third parties in order to process your order.
Law Enforcement/Legal Process. Crazy Egg reserves the right to disclose any Information (including Personally Identifiable Information): (1) to comply with any law, regulation, or legal request, if and to the extent that we reasonably believe disclosure is in accordance with or required by any applicable law, regulation or legal process; (2) to enforce, apply, or investigate breaches of the Terms or other agreements; or (3) protect the rights, property, user experience, or safety of Crazy Egg, our employees, our users, our Clients, or others.
Aggregated, Anonymized, Pseudonymized, or De-identified Information. We may disclose or use aggregated, anonymized, pseudonymized, or otherwise de-identified Information for any purpose.
-
Transfer of Data Abroad; International Users.
Our Website is directed to visitors from the United States of America. If you are visiting Our Website or a Client Site from a country other than the United States of America the various communications will necessarily result in the transfer of information across international boundaries. By visiting Our Website or the Client Site, as applicable, you consent to the processing and transfer of your data as set out in this Privacy Policy. By using Our Website or the Client Site, as applicable, you consent to the collection, storage, processing, and transfer of your information in and to the United States, or other countries and territories, pursuant to the laws of the United States.
If we are asked by a Client to transfer Personally Identifying Information from a Client Site in the European Economic Area (“EEA”), Switzerland, or the United Kingdom to other countries not deemed to have adequate data protection regulations under applicable data protection law, we will offer to enter into the European Union Model Clauses, also known as Standard Contractual Clauses, or such other equivalent clauses issued by the applicable country, with the Client. To request to enter into such clauses, please contact us at [email protected].
-
Security and Protection of Visitor Information and Client Information
Crazy Egg implements security mechanisms to protect Visitor Information and Client Information from loss, misuse and unauthorized access, disclosure, alteration and destruction. Examples of these security mechanisms include limited and password-protected access, firewalls, and SSL encryption to protect transmission of data, as further described above and in our Terms of Use. For additional questions or information regarding our security standards, please contact us at [email protected].
-
Policy Concerning Children Under Age of 16
Crazy Egg does not knowingly or intentionally collect Personally Identifiable Information from children under 16. If we learn that we have Personally Identifiable Information of a child under age 16, we will remove it. If you believe we have Personally Identifiable Information about a child under the age of 16, please notify us at [email protected].
-
Changes to Our Privacy Policy
Crazy Egg retains the discretion to amend or modify this policy from time to time. Use and disclosure of Information we obtain is subject to the later of: (1) the policy in effect at the time such visitor Information or Client Information is collected or (2) any subsequent policy to which you agree or of which you have notice, if you elect to use Crazy Egg or a Crazy Egg Client Site (including the Crazy Egg Website) following such acceptance or notice. If we make material changes in the way we use or disclose Personally Identifiable Information, we will notify you through one or more of the following means: a direct communication to your Crazy Egg account, a communication to the e-mail address associated with your account, or a clear and prominent announcement on the Crazy Egg Website. Your continued access to or use of Crazy Egg or websites that use Crazy Egg following notice of material changes to this Privacy Policy shall constitute consent to any amendments and/or modifications.
-
For More Information / Your Information Rights
Privacy Officer / Notices. Crazy Egg welcomes any questions or comments about this Privacy Policy or our privacy practices, including regarding any disclosure of third party information for direct marketing purposes. Any such comments or questions should be submitted via e-mail to: [email protected].
Access to Personally Identifiable Information or other Information Stored at Crazy Egg At any time, a Crazy Egg Client or Crazy Egg Visitor may access and/or modify their Personally Identifiable Information or other Information stored by Crazy Egg on their behalf, to enable them to access, rectify and restrict processing of their respective Information, and allow them to export their Information, by accessing their Crazy Egg account and contacting us at [email protected].
California Information Rights. Under California Civil Code Section 1798.83 (the “Shine the Light” law), California residents who provide personal information in obtaining products or services for personal, family or household use are entitled to request and obtain from us once per calendar year certain disclosures about the personal information we shared, if any, with other businesses for their own direct marketing uses. If applicable, this information would include the categories of personal information, and the names and addresses of those businesses with which we shared personal information, for the immediately prior calendar year (e.g. requests made in 2019 will receive information regarding 2019 sharing activities). To make such a request, please send an email to [email protected] with a subject line of “Request for California Privacy Information.” Please be aware that not all information sharing is covered by the “Shine the Light” requirements and only information on covered sharing will be included in our response.
-
Do-Not-Track Signals
Some web browsers may transmit “do-not-track” signals to the websites with which the user communicates. Because of differences in how web browsers incorporate and activate this feature, it is not always clear whether users intend for these signals to be transmitted, or whether they even are aware of them. Our practices with respect to such signals are set forth in https://www.crazyegg.com/opt-out.
-
Manage my cookie preferences