Privacy

Last updated 24 September 2026

1. Who we are

Astern is operated by KENY ENTERPRISES LLC, a New York limited liability company trading as Keny Labs. We are the data controller for the information described here, and we are reachable at connect@astern.dev.

2. The short version

Astern exists to count visitors, so we have built it to count without identifying anyone. Our tracker sets no cookies, stores no raw IP addresses, and cannot follow a person from one day to the next or from one site to another. We honour Do Not Track and Global Privacy Control. Most of what follows is detail about that.

3. If you are visiting a website that uses Astern

When you visit a page carrying our tracker, we receive: the page address, the site that referred you, the campaign tag in the link if there was one, your country, your device type, browser, operating system, language and screen size, and the time.

We do not store your IP address. We use it, together with the date, the site you are on and your browser's user-agent, to compute a one-way hash that acts as a temporary visitor identifier. That hash changes every day and is different for every website, so it cannot be used to recognise you tomorrow, or to connect your visit to one site with your visit to another. We keep no key that would let us reverse it.

We do not set cookies and do not use browser storage on the sites we measure. We do not build advertising profiles, we do not sell data, and we do not share it with data brokers.

If your browser sends Do Not Track or Global Privacy Control, we record nothing at all. Automated traffic and headless browsers are discarded.

Where the website you visited sends us an event such as a signup or a purchase, it may include an identifier of its own so it can match that event to its own records. That identifier belongs to that website, which is the controller for it; we process it on their instructions.

Lawful basis. Where the GDPR applies, we rely on legitimate interests: measuring whether advertising delivered real visitors, using the least identifying method we could design. Because we hold no identifier that can be traced back to a person, we cannot single you out in our records. If you believe we hold information about you, write to us and we will help as far as the data allows.

4. If you are an Astern customer

We hold the account details you give us — name, email address, company name — along with your websites and domains, your campaigns and their settings, your credit balance and the record of charges, and your correspondence with us.

We use this to run your campaigns, bill you, support you and meet our legal and accounting obligations. The basis is the contract between us, and our legal obligations for records such as invoices.

Payments are handled by Stripe. Card details go to Stripe directly and we never see or store them; we keep only the result of a payment and the last four digits Stripe shows us.

5. Who else is involved

We use a small number of providers, and only what the job needs:

• Advertising platforms — Google, Microsoft, Meta and Reddit. We send them the advertising copy and settings for your campaigns. We do not send them our visitor data.
• Stripe — payments.
• Anthropic — we use Claude to draft advertising copy from your public web page and to summarise your own performance data for your weekly note. We do not send it visitor records.
• Google Search Console — only if you connect it, and read-only. We never write to it.
• Our hosting provider — the servers that run Astern and its database.

We may also disclose information where the law requires it, or to protect our rights or someone's safety.

6. Where data is held

Astern's database is hosted in the United States. If you are in the United Kingdom or the European Economic Area, that means your information is transferred outside your region; where that transfer needs a safeguard we rely on the European Commission's standard contractual clauses with our providers.

7. How long we keep things

Visitor records are kept for 25 months and then deleted; the daily hash inside them stops being meaningful after the day it was made. Account and billing records are kept for seven years, because tax and accounting rules require it. Correspondence is kept for three years.

8. Your rights

Depending on where you live, you may have the right to see the information we hold about you, correct it, delete it, object to how we use it, restrict it, or receive a copy in a portable form. You may also complain to your data protection authority.

We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are used in California law.

To exercise any of this, write to connect@astern.dev. We answer within 30 days. For visitor data, please see section 3: we usually cannot identify a visitor from our records, which is deliberate.

9. Security

Traffic to Astern is encrypted in transit. Access to the production database is limited to the people who operate the service. Secrets are held outside the codebase. No system is perfectly secure, but we hold as little as the job allows, which is the strongest protection we can offer you.

10. Children

Astern is a business tool and is not directed at children. We do not knowingly collect information from anyone under 16.

11. Changes

If we change this notice in a way that affects you, we will tell account holders by email before it takes effect. The date at the top always shows the current version.

12. Contact

KENY ENTERPRISES LLC (trading as Keny Labs) — connect@astern.dev.