A: UserTrail is designed to support customers with their GDPR obligations. For visitor analytics, the customer typically acts as the data controller and UserTrail acts as the data processor.

UserTrail provides privacy controls including sensitive-field masking, private-element exclusions, consent-aware installation, configurable retention, authenticated access, and support for data deletion requests. Our Data Processing Agreement is incorporated into our subscription terms.

We do not currently advertise guaranteed EU-only data residency, so if you have a specific hosting-region requirement, please let us know and we will confirm whether we can meet it.
More information is available in our Privacy Policy and privacy and masking documentation.