# Frequently asked questions

> Answers about signing up, inviting your team, how PilotFox counts visitors, sessions and bots, keeping your own visits out, revenue, imports and exports, sharing dashboards and deleting data.

## Accounts

### How do I get an account?

[Sign up](https://pilotfox.app/signup) with your email address and open the confirmation link PilotFox emails you. Open it in the browser you signed up in to keep the password you chose. If you open it on another device or in another browser, it still verifies your address and signs you in, but without a password: choose one with *Forgot password* on the [sign-in page](https://pilotfox.app/login). Your account comes with its own organization, with you as its owner, ready for your first site. If someone invited you, open their invitation instead: you join their organization and get none of your own.

### How do I change my email address?

On your Account page, choose *Change* next to your email and enter the new address. PilotFox emails a confirmation link to your current address; opening it sends a link to the new address, and your email changes when you open that one. Open both links in a browser where you are signed in to your account: they do nothing for anyone who isn't, so an address only joins the account that asked for it. The email to the new address names your account by its current address, partly hidden (for example a\*\*\*@example.com).

### How do I add my team?

In Organization settings → Members, an owner or admin invites people by email, each with a role and, if you like, access to only some sites. People you invite sign up, or sign in, from the link in the invitation email. One account can belong to several organizations.

### How do I delete my account?

At the bottom of your Account page, *Delete account* shows what goes with your account before anything happens: the organizations you are the only member of are deleted with all their sites and data, and you leave every other organization. If you are the only owner of an organization that has other members, make another member an owner, or delete the organization, first. Confirm with your password and by typing your email address; an account without a password (Google, GitHub or emailed codes) signs in again first and then has 10 minutes. You are signed out, and PilotFox emails your address that the account was deleted. This cannot be undone.

## Tracking

### How does PilotFox tell visitors apart without cookies?

The server hashes a secret value kept per site, the site's id, the visitor's IP address and their browser's user agent into a visitor id. The IP address itself is never stored, and the same person gets unrelated ids on different sites. See [Privacy and data](https://pilotfox.app/docs/privacy#counting-visitors-without-cookies).

### How long is a session?

A session lasts until 30 minutes pass without an event from the visitor. Identifying a user in the middle of a session does not start a new one.

### Are bots counted in my numbers?

No, by default. Requests flagged by the bot checks (user agent, request headers, browser signals, network and request rate) are left out of your reports and shown in the Bots report instead. Site settings → Bots can keep them in.

### How do I keep my own visits out of the reports?

Add your IP address or range under Site settings → Exclusions, or run `pilotfox.optOut()` in the browser console on your site; `pilotfox.optIn()` undoes it.

### Does PilotFox respect Global Privacy Control?

Yes. Browsers that send the GPC signal are not tracked unless you turn this off in Site settings → Privacy & identity. PilotFox reads the GPC signal, not the older Do Not Track header.

### Can one site cover several domains or subdomains?

Yes. The script sends the full page URL, so the hostname is recorded with every event and can be used as a filter. To accept events from listed hostnames only, set *Allowed hostnames* in Site settings → Privacy & identity.

### How big is the tracking script?

Under 10 KB compressed. It loads with `defer`, sets no cookies and sends each pageview or event as one small request. The session replay recorder is a separate file, loaded only on tabs that are recorded.

## Revenue

### Which payments does PilotFox import?

Payments from Stripe, Dodo Payments or Polar that were actually paid, with their full and partial refunds. From Stripe: paid Checkout Sessions, including those created by Payment Links; payments made without Checkout and subscription renewals are not imported, and for a subscription started in Checkout, the first payment counts but its refunds are not tracked. [Revenue tracking](https://pilotfox.app/docs/revenue#what-counts-as-a-payment) lists exactly what counts for each provider.

### Why is a payment not linked to a visit?

A payment is linked when its `metadata.pilotfox_ref` (or a reference the script added to a payment link) matches the `ref` of a `checkout` event sent in the 7 days before it, when its `metadata.pilotfox_user_id` matches a user you identified, when the customer's email matches the `email` trait your server sent for a user (an email set only in the browser does not count), or when the provider's same customer paid before and that payment is linked. If none of these match, the payment still counts in your revenue totals, but not in filtered reports or per-source breakdowns.

### Which visit gets the credit for a payment?

By default the latest visit that came from somewhere (a search, a link, an ad, an email) within 90 days before the payment, so a buyer who found you through a search and came back by typing your address is counted under the search. You can credit the first visit or the last visit instead, and change the lookback window, in Site settings → Revenue; the reports change at once. See [Credit models](https://pilotfox.app/docs/revenue#credit-models).

### Does PilotFox convert currencies?

No. Each payment keeps its own currency, and reports show one currency at a time: the site's default currency, or another one picked on the Revenue page.

## Data

### Which analytics tools can I import data from?

Umami (CSV), Simple Analytics (CSV), Plausible (CSV ZIP) and PilotFox's own export (JSONL), in Site settings → Import & export. Plausible exports hold daily totals, so PilotFox creates approximate events from them and marks the import as approximate.

### Can I export my data?

Yes. Site settings → Import & export downloads a site's raw events as JSON Lines (NDJSON) for up to 400 days at a time, and the same export is available through the [API](https://pilotfox.app/docs/api). Exports need the editor role, because they contain visitor and user ids.

### Can I share a dashboard with someone who has no account?

Yes. A share link gives read-only access to one site's dashboard, can expire, and includes sessions, users or replays only if you choose so. A public dashboard shows traffic statistics to anyone with its link, never sessions, users or replays. Affiliates get their own [portal](https://pilotfox.app/docs/affiliates#the-affiliate-portal).

### How do I delete a person's data?

Open the user in the Users report and choose *Delete user data* (editors and above). Their events, sessions, replays, identity links and traits are erased in a background job; their payments stay in your revenue totals without any link to them.

### Is PilotFox GDPR-friendly?

Yes, by design. The script sets no cookies, IP addresses are never stored, visitor ids are salted hashes that differ per site and can change every day, Global Privacy Control is respected by default, session replay is off until you turn it on and masks inputs, and you can erase a person's data or delete a site at any time. PilotFox signs a [data processing agreement](https://pilotfox.app/dpa) with you as your processor. Whether you need consent or a privacy notice still depends on your website and your law: see [GDPR-friendly by design](https://pilotfox.app/gdpr).

### What happens when I delete a site?

Its events, session recordings, payments, goals, funnels, share links and settings are erased. This cannot be undone.
