What we keep
Page visits and events Which pages a session saw, in order — this is the funnel. 3 years
Orders and their value What was bought and for how much, from WooCommerce. 3 years
Two first-party cookies (velora_vid, _vlra) One random visitor id, so a returning visit ties to the earlier one. velora_vid is written in the browser, _vlra by the shop’s server as a fallback. Set only after consent. 2 years
A truncated IP address Cut to /24 (IPv4) or /48 (IPv6) before it is written down. truncated on arrival
Campaign cost Read from your ad accounts, or entered by you. 3 years
What we never store
Names, addresses, phone numbers Nothing that names a shopper reaches Velora — at most a one-way hash of their e-mail, used to recognise a returning customer and, if you switch it on, to match a sale in Google Ads.
Card or payment details Order value, yes. How it was paid, never.
Full IP addresses The last bits are dropped before anything is written to disk.
Browsing on other sites No third-party cookie, no pixel, no network across shops.
Anything sold to a third party Your data is never sold, rented or pooled with other customers.