Export and erasure

The Compliance tab gathers everything related to the right of access and the right to erasure (GDPR articles 15, 17 and 20).

#Download all data (CSV ZIP)

The "Download all data (CSV ZIP)" button exists in two places, with slightly different behavior.

#1. In the Dashboard tab header

The download uses the period selected at the top of the dashboard (Today, 7d, 30d, 90d, 12 months or Custom). Handy to share a snapshot of the current window with a colleague or a client.

#2. On the Export and erasure card in the Compliance tab

The download ignores the selected period and forces 90 days — the maximum window allowed by our GDPR retention policy for raw events. This is the full data-portability export (GDPR article 20).

#How it works

• Direct streaming (synchronous): one click, the browser receives the ZIP in a few seconds. No background job, no email, no 24-hour link.
• File name: wheremyflow-export-<domain>-<YYYY-MM-DD>.zip.
• Contents: a README.txt, a manifest.json (listing every generated file and its status), then 6 folders — one per dashboard section — totalling 23 CSV files.

| Folder | Contents | |---|---| | 01-overview/ | KPIs, traffic timeline, hourly heatmap, top-countries compact | | 02-content/ | Top pages, entry pages, exit pages, internal searches, downloads, outbound links | | 03-behavior/ | Custom events list | | 04-sources/ | Channels, referrer sites, AI traffic | | 05-audience/ | Countries, cities, browsers, OS, devices, languages | | 06-technical/ | 404 errors, 500 errors, suspicious pages |

• Column headers in English only (Unique visitors, Pageviews, Country code, etc.) so you can hand the export to any developer or data analyst regardless of your dashboard language.
• k-anonymity preserved: low values are rounded or shown as < N per the policy active on each view.
• No exit outside the EU: generation runs on Clever Cloud (Nantes), the ZIP is streamed straight to your browser.

The 5 Compliance PDFs (signed DPA, processing fact sheet, visitor notice, registry, self-assessment) are not bundled in the ZIP — they are downloaded individually from the _Status & documents_ card in the Compliance tab, because they are not statistical data.

#Archive a site

"Archive this site" button on both _Export and erasure_ (Compliance) and _Danger zone_ (Install). The site disappears from the dashboard immediately but its data stays in the database for 30 days. While that window is open, archiving is reversible — contact us to reactivate the site. After 30 days it becomes a permanent erasure (database cascade).

#Erase a site immediately

"Erase this site" button (GDPR article 17). Double confirmation: tickbox plus exact domain typing. Deletion is immediate and irreversible — every event, aggregate, session and setting belonging to the site is cascaded.

#Automatic erasure

Erasure also happens on its own, by retention doctrine:

• Raw events: 90 days.
• Aggregated stats: 25 months.
• Anonymisation salt: 1 month (rotation, atomic deletion).

See Retention for the full table.

#End visitor exercising their right to erasure

Since we hold no stable visitor identifier (no cookie, no email), the only practical way to identify their data is an approximate time window. It's a deliberate trade-off of the privacy-first model.

1. Ask the visitor for an approximate date and time of their visit.
2. Contact the wheremyflow DPO to purge the targeted window.
3. Confirm to the visitor by email that the deletion is done.

See DPO contact.