Trust
What we keep, where, and who touches it.
Written plainly, including what we don't have yet. If a security review needs something that isn't here, ask and we'll answer in writing.
Where data is stored
Each site picks EU (Belgium, europe-west1) or US (Iowa, us-central1) storage when it's created, on every plan including Free. Consent records and monitored events never rest in the other region. Our servers run in the US, so that's storage, not processing. Account, login and billing data are stored in the US.
What a consent record holds
When they answered, what they saw, what they picked, and how: the banner, your own control, or a privacy signal. An opaque consent ID the visitor can see. No IP address, no user agent, no fingerprint. Records are kept 24 months, and the application itself has no permission to delete them.
What monitoring records
The shape and type of each payload field, never the value, and the host and path of each request a tag made. Event names are kept: your dataLayer event names, and the name Meta, GA4 and Pinterest send. Each event carries the visitor's random consent ID.
How we read a visitor's region
From the country Google's load balancer attaches to the request. Never from a third-party lookup, never from the browser's claims, and never finer than a country or US state.
Banner accessibility
We test the banner against WCAG 2.2 AA and publish the result: partially conformant, self-assessed. Reject and Accept are equal, colours that fail contrast can't be published, and the banner works with a keyboard.
Tag Manager access
Reading your container needs your approval by Google sign-in. Writing needs a separate, higher permission you grant on purpose, and nothing is written until you approve the plan. Each change is a new version in your container.
Subprocessors
| Who | What for | Where |
|---|---|---|
| Google CloudEU and US | Hosting, databases, CDN. Its load balancer reads the visitor's IP to tell us the country. | EU and US |
| Google (sign-in and Tag Manager API)US | Optional Google sign-in, and reading or writing your Tag Manager when you connect it. | US |
| StripeUS | Billing and payments. | US |
| ResendUS | Sending email: alerts, sign-in, receipts. | US |
| GoHighLevel (LeadConnector)US | Managing our relationship with customers: names, emails, business name and first site. Never visitor data, and no marketing without opt-in. | US |
| AnthropicUS | Sorting your trackers by purpose and suggesting which events to track. Receives tag details, never visitor data. | US |
Sign-in runs on our own infrastructure, not a third-party identity provider.
Not here yet.
We'd rather say so than put up a badge we haven't earned.
- SOC 2 or ISO 27001 reportIn progress
- Penetration test summaryIn progress
- Public status pageIn progress
Security questions: hello@tagsentry.ai
Get the boring stuff off your plate.
Start with a free scan. We check for a cookie banner and whether it stops your trackers. Under a minute, no account.