What we measure
Last updated: November 1, 2026
Nabbed is run from Germany. This page lists exactly what we record when you visit nabbed.media, and why. The privacy policy has the legal details, your rights and who processes data for us.
Every visit: anonymous counts
When our server sends you a page, it writes one line of statistics to Cloudflare Workers Analytics Engine. Nothing runs in your browser for this and nothing is stored on your device: no cookie, no local storage, no script. The line holds exactly this:
| Field | Example |
|---|---|
| What happened | a page view, a waitlist signup, or a confirmed signup |
| Page | /, /privacy, /terms, /what-we-measure, /confirm, one of our guides (such as /sonarr-radarr-alternative), or “other” |
| Campaign tags from the link you followed | utm_source=reddit, utm_medium=paid_social, utm_campaign, utm_term, utm_content (which ad) |
| Country, from Cloudflare | DE |
| Device type | mobile, tablet or desktop |
| How you arrived | from another site, or by a link on nabbed.media |
| Your analytics choice | accepted, rejected or not made yet |
| A random id for the line itself | new for every line; it links nothing |
Never recorded: your IP address, your browser’s identification string, the page you came from, ad click ids, cookies or any id that could recognise you or your device. Your IP address is used for one minute, in memory, only to stop a single address flooding the counts. Bots, link previews (such as Reddit’s) and pages your browser loads ahead of time aren’t counted.
A waitlist signup or confirmation line holds only the campaign tags: no country, device or anything else. The waitlist itself keeps the date and hour of your signup and of your confirmation, not the exact time, so the two can’t be matched. The link in the confirmation email is never recorded: it isn’t a page, and its code is moved out of the address before anything loads.
Why: to see which ads and pages bring people to Nabbed and how many of them join, so we spend less on ads that don’t work. We only look at totals of five or more. Lines are kept for about three months. Our legal basis is legitimate interest (Art. 6(1)(f) GDPR). Because nothing in these lines identifies you, we can’t pick out your visits; if you have questions, email privacy@nabbed.media.
Joining the waitlist
We store your email address, the campaign tags of the link you came from, the name of the site that linked to us (for example reddit.com) and the date and hour you joined. Not your IP address. We then send you one email with a link to confirm the address is yours, and only email you about Nabbed once you have; if you don’t confirm within 30 days, we delete your signup. Details in the privacy policy.
Only with your consent
Optional services stay off until you switch them on in . If your browser sends Global Privacy Control, they stay off.
- Visit engagement (Nabbed): see below for exactly what is sent.
- Analytics (Amplitude, EU): your sessions, the pages you view, how you found us and clicks, with pseudonymous ids in cookies. If you also allow Session Replay, masked recordings of your visit: all text, form fields and labels are masked in your browser, and the waitlist form and email fields aren’t recorded at all.
- Advertising (Reddit): the Reddit Pixel tells Reddit about your visit and, if you join, your signup; our server also reports the signup to Reddit with the ad click id and a hash of your email, never your IP address.
Visit engagement (only with your consent)
If you switch on Visit engagement (under Analytics in Privacy settings, or “Accept all”), the page measures in your browser how you use it and sends it to our server as anonymous statistics, stored with the visit counts above. Reading this from your device is why it needs your consent. Our server checks your choice again before saving anything, and nothing is sent with Global Privacy Control on.
| Field | Example |
|---|---|
| Furthest scroll | 0, 25, 50, 75 or 100 % |
| Time the page was in use (visible, with activity in the last 10 seconds) | 0–5 s, 5–15 s, 15–30 s, 30–60 s or over a minute |
| Whether you interacted at all | yes or no |
| Sections read (at least half visible for a second) | how it works, features, household, open source, pricing, waitlist |
| Clicks on calls to action | joining the waitlist, or a link to the app, docs, GitHub or Discord |
| Page, campaign tags, country and device type | as for the visit counts |
| A random id for this page view | held only in the page’s memory; a new one on every page |
At most two engagement reports per page view (one early, one when you leave), plus one per call-to-action click. No mouse movements, keystrokes, form contents, screen size or other details of your device, and nothing is stored on it.
In the app
Once you have an account, our servers record a fixed set of product milestones (sign-up and its campaign, onboarding, your household and agent, first title and import, subscription and payment events) with pseudonymous ids and no cookies. Switch them off in the app under Settings → Profile & preferences → Share product statistics.
Changes
We update this page whenever what we record changes. When an optional service gains a new purpose, site or recipient, we ask for your consent again.