Privacy by architecture
Your report stays local
The analysers remain telemetry-free. Hub analytics are privacy-limited, and contact details or diagnostics are processed only when you deliberately send them.
The boundary
- No source report uploads
- No analyser telemetry
- Raw IP addresses are not stored
- No session replay or advertising profiles
- Return visits require explicit consent
- Contact contents stay out of analytics
Local analyser boundary
Local analysers do not report back
Consumption Lens and Program Lens are self-contained HTML files. Parsing and analysis happen in your browser on your device.
- No analytics, telemetry, error tracking or third-party fonts.
- No server-side application or API.
- A browser-enforced Content Security Policy blocks fetch, XMLHttpRequest, WebSocket and sendBeacon requests.
- Your source report, filename, calculated results and interactions inside the analyser are never available to the Hub.
Hub analytics
Privacy-limited website measurement
The Hub uses Microsoft Azure Application Insights hosted in West Europe. Anonymous analytics is enabled by default for our legitimate interest in improving the products, guidance and release experience. You can disable it at any time through Analytics settings.
The Application Insights SDK runs only on Hub pages. It is not bundled into Consumption Lens, Program Lens or any archived analyser.
Data collected
What the Hub measures
| Data | Purpose | Boundary |
|---|---|---|
| Page and referrer domain | Understand visits and navigation. | Query strings, hashes and full referring URLs are excluded. |
| Visible engagement time and scroll depth | Understand whether content is read and where visitors disengage. | Measured in aggregate; no screen recording or session replay. |
| Approximate country (anonymous) | Understand regional adoption. | Inferred from your device time zone, not your IP address, so no network address is used or stored. |
| Approximate city, province/state and country (return analytics only) | Finer regional adoption for opted-in visitors. | Only with return analytics. Azure uses your IP address to derive location, then discards the address and stores 0.0.0.0. |
| Product and version downloads | Measure adoption of current and archived releases. | No report name, local filename or report contents. |
| Guide steps, completion, replay and speed | Improve setup guidance. | Only predefined step names and controls are recorded. |
| Release filters and update-check arrivals | Understand version and upgrade interest. | Only a known product and semantic version are accepted. |
| Former analyser landing-page entrypoint | Measure visits redirected from the four previous product domains. | Only a fixed domain label and product are recorded; redirect query strings are excluded from page-view URLs. |
| Browser/device class and page-load performance | Improve reliability and responsive design. | No fingerprinting or advertising identifiers. |
Contact form contents are excluded from Application Insights. A successful submission records only the request type, selected product and whether diagnostics were attached.
Contact requests
Messages and diagnostics are sent by email
The unified Contact form sends your selected product, subject, message, reply address and an optional diagnostics attachment to info@dewicadat.nl. Azure Communication Services processes the message for delivery; the Hub does not place submissions in a public file store or database.
- A reply address is required for Help and Feedback.
- Diagnostics are optional, available only for Help, limited to 5 MB and restricted to the current schema-v2 analyser format.
- The uploaded diagnostics file is validated against the schema-v2 analyser format before being attached to the email.
- Azure Table Storage keeps one reusable global hourly counter. Salted email-address hashes are held only in bounded Function memory for up to one hour; neither mechanism stores the address, message or attachment.
- Messages are retained in the contact mailbox only as long as needed to respond, act on feedback and protect against abuse.
Do not send source reports, report rows, filenames, customer or partner names, tenant IDs, agreement IDs or claim IDs. You can use info@dewicadat.nl instead of the form.
Your choices
Anonymous, return or disabled
- Anonymous analytics uses an identifier that lasts only for the current page and disables SDK cookies and browser storage. Approximate country is inferred from your device time zone; the IP-based location lookup stays disabled.
- Return analytics stores one random first-party ID so visits can be recognised across sessions and lets Azure derive an approximate city, province/state and country from your IP address before discarding it. It is never linked to a name, email or Microsoft account.
- Disable analytics stops Hub telemetry and removes the return-visitor ID. If local storage is unavailable, one strictly necessary preference cookie preserves the opt-out.
Manual update checks
Check your local version
Find the version number inside the analyser and compare it with the current release on the Updates page. The analysers never check automatically.
Storage limitation
How long we keep analytics
Raw Application Insights telemetry is retained for 30 days in the dedicated West Europe Log Analytics workspace. The random return-visitor ID expires after 180 days and is removed sooner if you disable return analytics or clear site data.
Controller and rights
Your data-protection choices
The Hub is independently operated by Dewi Cadat in the Netherlands. Use Analytics settings to object to Hub analytics or remove the return-visitor ID. For access, correction or deletion requests concerning contact messages, email info@dewicadat.nl.