Loading page
Interim notice, last updated 21 October 2026. This page describes what Fathom actually collects and stores today, in plain language. It is under legal review and will be replaced by a reviewed policy; until then it is the accurate description of our practice.
Fathom is operated by SearchActions. Contact: use the contact page on this site.
Fathom is installed by the owner of a website to measure that website's traffic. On a monitored website we record, at the Cloudflare edge, information about each request: the page requested, the time, the HTTP status, the response size, the referring page, the browser's user-agent string, the country, and whether the request came from a known crawler or automated agent.
We do not store visitor IP addresses. Each address is replaced, before storage, by a hash computed with a secret salt that changes every day. The same visitor therefore produces a different value each day, and the original address cannot be recovered from what we keep.
We do not set tracking cookies and do not track people across websites. If a website owner also installs the optional JavaScript snippet, it records page views and events the owner has defined on their own site under the same address-hashing rule.
If you create a Fathom account we store your email address, name, the organizations you belong to, and the settings and integrations you configure (for example an encrypted Cloudflare API token, or a Google Search Console connection you authorize). We send transactional email only: sign-in links, verification, password resets and invitations.
While you are signed in, we use PostHog to record how you use Fathom: the pages you open, what you click, errors you hit, and a recording of your screen. Anything you type is hidden in these recordings. If you use the AI chat, PostHog also stores your questions and its answers. We use this only to find and fix problems in Fathom.
On Fathom's public pages, PostHog counts page views and clicks without setting cookies or storing anything on your device, whether or not you answer the cookie notice. It tells visits apart only by a value its servers compute from your IP address and browser and change every day, so a visit cannot be linked to another day's. If you click Allow, PostHog also sets a cookie to tell one visit from another and records a replay of the page with anything you type hidden.
Raw request data for monitored websites is kept for 90 days. Per-minute aggregates are kept for twelve months. When a website owner deletes a site, its data is recoverable for 14 days and then destroyed. PostHog keeps screen recordings of Fathom for 30 days.
Data is processed on servers we rent from Hetzner (European Union and United States regions) and through Cloudflare's network, which the website owner has already chosen to route their traffic through. PostHog processes the product usage data described above in the United States.
If you are a visitor to a monitored website, the website owner is responsible for that website's use of Fathom; we hold no information that identifies you personally. If you are a Fathom account holder you can export or delete your organization's data from the settings pages, or ask us to do so.