The situation
A site wants to know which sources and campaigns bring visits, but the person responsible would rather keep the minimum personal data for the minimum time. They do not want cookies of their own for this and they do not want any data to leave the site.
How it is solved
evoOrigin separates three levels. The more detail, the less time it is kept; anonymous data does not expire.
| Level |
What it stores |
Default |
Default retention |
| Visits |
One row per session: landing page without query string, origin, IP (truncated by default), user if identified |
Off |
90 days |
| Lead attribution |
First and last origin, number of visits and dates, tied to an external reference |
Off |
24 months from the last interaction |
| Statistics |
Monthly counters by source, medium and campaign, with no IP or session |
On if visit logging is on |
No limit |
Before a visit is deleted, the daily purge adds it to the monthly statistics.
Other settings that point the same way:
- With logging off, the origin lives only in the Joomla session, with no cookies of its own and no JavaScript.
- The IP can be stored truncated (IPv4 to /24, IPv6 to /48), as a salted hash, or in full. Full only makes sense with short retention.
- Ad click identifiers (
gclid, gbraid, wbraid, msclkid, fbclid) are not stored in the database unless you enable it, and they have their own retention.
- "Log only with consent" reads the cookie where your banner stores the choice and only logs when it carries the "accepted" value.
- No data leaves the site: not to third parties, not to Evoluzziona.
- The privacy plugin can export and delete the visits of an identified user.
What is involved
Limits
- With visit logging off there is no history: only the origin of the current session.
- Anonymous statistics carry no IP or session: they show trends, not individual visits you can go back to.
- Visits are counted per session, not per person.
- If you have a cookie banner, you have to enter the name of its cookie and the "accepted" value; with consent required and no cookie configured, no visit is logged.
- The legal basis, the retention periods and what must appear in your privacy policy are for whoever processes the data to decide. This is not legal advice; consult your adviser.
Related products