Click counter, GDPR and LGPD: what to know before you install

Why a click counter raises privacy questions

Every tool that measures visitors touches personal data in some way. Even a simple counter has to decide what to keep: a date, a device, a page, maybe an address that identifies a person. Privacy laws such as the GDPR in Europe and the LGPD in Brazil are mostly about those choices, and about being open with people on what is collected and why.

That is why the right first question is not 'is this tool legal?' but 'what exactly does this tool keep?' Once you can answer that in plain words, you can put it in your privacy page and discuss it with a lawyer or a data protection professional. This article gives you the facts about WhatsClicks so you can do that. It is not legal advice and it does not say your site is compliant, because that depends on your whole setup.

What does a WhatsApp click counter actually store?

When someone taps your WhatsApp button, the link goes through WhatsClicks first. The service registers the click and sends the person straight on to the conversation with your number. For each click it keeps a short list of facts:

• the date and time of the click
• the page where the button was, if you marked it with ?p=
• the button name or position, if you marked it with &src=
• the domain of the site where the button sat (only the domain, not the full address)
• the type of device: phone, tablet or computer
• the name of the browser and the operating system
• an anonymous visitor code, made with a one-way hash

A one-way hash means the code cannot be turned back into the original information. It is used only to tell whether the same visitor came back, so the dashboard can show returning visitors.

What does it not store?

Just as important is the list of things that are left out. WhatsClicks does not store the IP address, the name, the phone number or the e-mail of the person who clicked. It also does not show you who clicked. In the dashboard you see numbers, charts and tables, never a list of people.

WhatsApp itself does not hand the phone number of a person to anyone just because they tapped a link. You only see someone's number when that person sends you a message, and from that moment the conversation is between you and them, inside WhatsApp, under its own rules. The counter has no access to those chats.

How do you describe this on your privacy page?

A good privacy page uses simple language. You do not need to copy legal wording from anywhere. Start from the facts above and write them as short sentences your visitors would understand. For example, you could say that your site uses a service that counts clicks on the WhatsApp button, that it records the time, the page, the type of device and browser, and that it does not record names, phone numbers or e-mails.

Then check three things. First, does the text match what you really configured? If you do not use the page and button marks, do not claim you collect them. Second, does your site already have a privacy page, and is it easy to find? Third, are there other tools on the same page, such as ads or analytics, that collect more? Those need their own explanation, and they are separate from the counter.

1. List every tool on your site that measures visitors.
2. For each one, write what it collects and why.
3. Add the WhatsClicks facts from this article to that list.
4. Show the result to a professional who knows your local rules.

Questions to ask before you install any counter

Use this checklist with any service, not only this one. Write down the answers, because you may need them later.

• Does it store IP addresses, names, phone numbers or e-mails of visitors?
• Is the visitor code anonymous, and can it be reversed?
• Can I delete a link, and what happens to its history?
• Does it show me individual people, or only totals?
• Is there a plain description of what is stored that I can quote?
• Who processes payments and what do they see?

Do not assume that a tool is fine only because it is popular, and do not assume it is a problem only because it is small. Read what it stores.

Where to see the data in WhatsClicks

If you want to see for yourself what the service has about your clicks, open the Resumo tab in the dashboard. The tables Por link, Por página, De onde vieram os cliques and Por botão show only totals and names you chose. The block with device, browser and system shows only types, never a person. You can also export a CSV to see the same data in a spreadsheet.

That export is useful when a professional asks for evidence. Hand it over together with this list of what is stored and what is not. If you decide to stop using a link, you can pause or delete it in the Links tab, and the button stops counting or stops working, so change it on your site first.

A realistic plan for a small business

Most small businesses do not need a long project. A practical plan fits in an afternoon. Read your privacy page, add one honest paragraph about the click counter, and book a short talk with someone who knows the rules in your country. If you also run ads or other trackers, bring those too, because they usually matter more than a counter that keeps no names or numbers.

Remember that the best protection is collecting less. A tool that already leaves out IP, name, phone and e-mail starts from a lighter position, but only you and your adviser can say what your site needs.