# Safehouse (privacy)

| We do | We don't |
|---|---|
| Detect in the browser, sending at most one beacon per session | Set cookies |
| Count every session once, with no sampling | Store keystrokes or input contents |
| Keep the session id in `sessionStorage` | Keep raw fingerprints |
| Delete session detail after 90 days (30 for unclaimed sites) | Block anyone on our own |

**Safehouse (PCI-lite)** switches on when it sees card fields, Stripe Elements, `autocomplete="cc-*"` or checkout paths. No listeners go on payment fields, and there's no key timing on the page.

| `mode` | Purpose | Consent |
|---|---|---|
| `analytics` (default) | Label marketing data | Follows your banner |
| `security` | Fraud and abuse prevention only | May be strictly necessary |

The CNIL consent exemption covers **security only**. Forwarding labels to marketing tools needs consent. This isn't legal advice.