Frequently asked questions
Answers at a glance
The most common questions about features, pricing, privacy and setup of XICTRAQ — each question on its own page with a detailed answer.
General
- What is XICTRAQ? XICTRAQ is a Germany-hosted platform that bundles website monitoring, security, compliance and cookieless analytics in a single dashboard.
- Who is XICTRAQ for? For small and medium-sized businesses, agencies and operators of shops, SaaS services and corporate sites who want to keep availability, security and compliance in view.
- Which areas does XICTRAQ cover? Availability, security, compliance, SEO and cookieless analytics — twelve core modules in total.
- Can I use XICTRAQ for free? Yes. There is a permanently free plan without a credit card and without installation.
- Where is my data hosted? In data centres within the EU (Nuremberg, Falkenstein and Helsinki/Finland), following current GDPR requirements, without third-party trackers and without external fonts.
Features & modules
- How does XICTRAQ monitor availability? Via several independent measurement nodes in EU data centres (Nuremberg, Helsinki, Falkenstein) that decide by consensus whether an incident is real. The shortest interval is 30 seconds.
- What does the security scan check? More than 15 security headers, the SSL/TLS configuration including certificate validity and detectable technologies — with a score from A+ to F.
- Does XICTRAQ offer analytics without cookies? Yes. Reach measurement works cookieless and typically without a consent banner.
- Does XICTRAQ support GDPR and accessibility compliance? Yes. The GDPR scan detects trackers before consent, the accessibility scan tests against WCAG 2.2 AA. NIS2 and CRA building blocks are also included.
- What are heartbeats and API monitoring? Heartbeats are a dead-man’s switch for cron jobs and backups; API monitoring checks endpoints regularly for response and content.
Pricing & billing
- Which plans are there? A permanently free plan plus the paid Starter, Business and Agency plans.
- How does billing work? By credit card and SEPA direct debit via Stripe or by bank transfer with a separate invoice — monthly or annually.
- Can I cancel monthly? Yes. Monthly plans run until the end of the current billing period and do not renew afterwards once you cancel.
- Are there setup fees? No. There is no setup fee and no minimum contract term beyond the chosen billing period.
- How is VAT handled? For EU business customers with a valid VAT ID the reverse-charge procedure applies, for third countries the export rule. The tax is determined automatically.
Privacy & GDPR
- Is the tracking GDPR-compliant? Yes — XICTRAQ is built privacy-first: cookieless, no cookies, no storage on the device for reach measurement (no localStorage), no transfer to third parties, IP addresses are not stored in clear text and hosting is exclusively in the EU. Because no cookies are set, the classic reason for a cookie banner falls away — you measure all visitors, not just those who accept a banner.
- Do I need a data processing agreement? No separate agreement is needed: data processing under Art. 28 GDPR is governed directly in § 9a of our terms and becomes binding upon contract conclusion.
- Is personal data stored? Reach measurement works without a persistent personal identifier; IP addresses are only processed for coarse location and network derivation, not stored as a profiling attribute.
- Where are the servers located? In the EU — on servers controlled by us in data centres in Germany (Nuremberg, Falkenstein) and Finland (Helsinki). This keeps the data within the EU and subject to European data protection law.
- How long is data retained? The retention period depends on the chosen plan and ranges from a few days to several years; older data is then automatically pruned.
Setup & technical
- How do I embed the tracking? With a single script tag in your page source. Optionally the tracker can be served first-party from your own domain.
- How quickly am I up and running? Usually within a few minutes: sign up, add a website and verify the domain once (DNS TXT record, meta tag or HTML file). After that, automatic monitoring starts; for analytics also embed the snippet.
- Do I have to install anything? No. XICTRAQ runs in the browser and on our servers; for analytics a script snippet is enough, for monitoring the public address.
- Does the tracking work without JavaScript? Yes. A no-script pixel records views even when JavaScript is disabled; such traffic is classified separately as machine/bot.
- Can I manage several websites and a team? Yes. Depending on your plan you manage a fixed website quota (expandable via add-on) in groups and invite team members with roles; the Agency plan adds white-label options.