SayHi privacy: basic counts, and optional visitor insights.

The settings are off, basic, and enhanced. Basic is the starting mode. Visitor insights are the enhanced setting, and they run when you allow them. Global Privacy Control keeps that visit on basic counts.

Basic analytics

A creator sets analytics to off, basic, or enhanced. When no setting is stored yet, the mode is basic. Off accepts no events from the collector. Basic counts page views, outbound clicks, referrer hosts, and country or device totals, with no visitor profile.

Enhanced visitor insights

Visitor insights are the enhanced setting. Creators can turn that setting on. When you allow it on that creator’s page, SayHi can recognize returning visits on that page only, keep a short behavior timeline, and connect it to a contact record if you later choose to write to the creator.

Recognition is first-party and profile-scoped. A visit to one creator’s page is never joined to a visit on another creator’s page.

SayHi may use first-party browser and device characteristics to recognize a returning visitor on this creator’s page if the stored identifier is missing. It is not used to track you across unrelated sites, and it is not used to discover who you are in the real world.

What we do not do

Global Privacy Control

If your browser sends Global Privacy Control (GPC), SayHi keeps measurement at the anonymous aggregate layer. Individualized visitor profiles and returning-visitor recovery stay off.

Google sign-in

If you continue with Google, SayHi stores Google’s account id and your display name. SayHi does not receive or store your Google email.

Contact submissions

SayHi stores a contact when the submission is accepted. Email is required. Name and the message are stored when the form includes them. Company and phone are stored when that block shows those fields and you fill them in. The record belongs to the creator you contacted, on that profile’s Mini CRM.

X and Instagram content

An X or Instagram card is a link and a label. SayHi does not fetch avatars, follower counts, or feeds, and it does not contact X or Instagram while the page is loading.

For a public X post, or a public Instagram post or reel, you can choose Load content. That loads only that item’s official embed inside an isolated frame on this site. X’s publish tools can show a public post without an app token. Protected posts are not available. Instagram public posts and reels use Instagram’s public embed page. SayHi does not use a Meta app, access token, or a proxy, and it does not place Instagram’s oEmbed HTML on the page around the frame.

The platform then receives the usual request data, including your IP address. If the embed is refused, times out, or stays blank, the card remains and the original link still opens it. You can hide the frame. SayHi will not request it again until you ask. Profile cards stay links.

Made with SayHi and Remix this page

If you open SayHi from a “Made with SayHi” link or “Remix this page”, this tab remembers that username and, if you later claim a page, we store it as the page you came from.

Retention and reset

Anonymous behavioral events are kept for a limited period (default 90 days). Fingerprint recovery keys expire. Contacts remain until the creator deletes them.

You can reset this browser’s SayHi visitor identity on a creator page using Privacy choices. That removes the local identifier and, when we can match this browser, the visitor profile for that page.

Contact

Who runs SayHi is on the About page. Contact: hello@sayhi.page.