# Privacy and data

> What the script sends to Antiro, what it never records, and what it keeps on the shopper's device.

This is one page of the Antiro docs (https://docs.antiro.io/privacy). Every page in one file: https://docs.antiro.io/llms-full.txt

## What the script sends

| When | What |
| --- | --- |
| Page load | The page address without its query string, the referrer’s host name, whether the visit came from an ad (with a hash of the click id, never the id), the visitor id Antiro issued earlier, general technical details about the browser and device (most of them hashed), and interaction counters. |
| When the order form is used | Interaction counters and the phone number typed so far. |
| When the order is submitted | The phone, name and address as typed, and interaction counters. |

Interaction counters are counts and timings only. Like any web request, each request also carries the visitor’s IP address.

## What the script never records

-   Which keys were pressed
-   The contents of any other field
-   Pointer coordinates

## What is kept on the shopper’s device

- `_atr_v` (cookie, 180 days): The visitor id, with a copy in `localStorage`.
- `_atr_st` (cookie, 2 hours): The order reference.
- `_atr_px` (sessionStorage): The bot verdict of this tab.

All of it stays on your store’s own domain, and nothing else is stored.