# Ciphera

> Ciphera is a Belgian software company. We build privacy-first tools for the web and run them on Swiss infrastructure.

Ciphera BV is a software company in Diegem, near Brussels, founded on 18 September 2024. Its product is Pulse Analytics, web analytics without cookies (pulse.ciphera.net). Customer data and its backups are stored in Switzerland, at Exoscale in Zurich with backups at Infomaniak, under the Swiss data protection act. Ciphera itself is a Belgian company, so Belgian law and the GDPR apply to it as well.

Ciphera BV (ciphera.net) is not affiliated with ciphera.co, ciphera.org, Ciphera Ltd (ciphera.uk) or the Ciphera apps.

## Product
- [Pulse Analytics](https://pulse.ciphera.net): Web analytics that shows how your site is doing without cookies and without following anyone. It is hosted in Switzerland and the Personal plan is free forever.

## Open source
- [Tessera](https://github.com/ciphera-net/tessera): The library behind Ciphera's sign-in, an implementation of OPAQUE (RFC 9807) with SDKs for Go and the browser. Apache-2.0.
- [Pulse dashboard and tracker](https://github.com/ciphera-net/pulse): The app Pulse customers use, and the script that runs on their websites. AGPL-3.0.
- [Pulse CLI](https://github.com/ciphera-net/pulse-cli): Pulse analytics from the terminal. Apache-2.0.
- [This website](https://github.com/ciphera-net/website): The code behind ciphera.net. AGPL-3.0.

## Key facts
- Company: Ciphera BV, enterprise number (KBO/BCE) 1013.721.660, De Kleetlaan 2, 1831 Diegem, Belgium
- Founded: 18 September 2024
- Data: stored in Switzerland (Exoscale, Zurich; backups at Infomaniak), under the Swiss data protection act
- Sign-in: Ciphera's own, built on OPAQUE (RFC 9807); the password never leaves the user's device
- ciphera.net sets no cookies, and Pulse counts visits without cookies and without building a fingerprint of anyone
- Carbon footprint: estimated with life-cycle assessment, method published

## Reference
- [About](https://ciphera.net/about): the company, who runs it, its registered details and press assets
- [Trust & security](https://ciphera.net/trust): what we keep, every company we work with, how sign-in works, what is public, and how to report a security problem
- [Blog](https://ciphera.net/blog): notes on privacy and the web
- [Glossary](https://ciphera.net/glossary): definitions of privacy and cryptography terms
- [Sustainability](https://ciphera.net/sustainability): estimated carbon footprint and its method
- [Contact](https://ciphera.net/contact): email addresses and the office

## Blog
- [Privacy Tools: What They Are and How to Choose](https://ciphera.net/blog/privacy-tools): Compare the best privacy tools for browsing, messaging, passwords, and website analytics. Learn how to protect your data online.
- [Cookieless Analytics: How It Works and What It Tracks](https://ciphera.net/blog/cookieless-analytics): Learn how cookieless analytics works, what it tracks, how EU privacy rules apply, and how Pulse measures traffic without cookies.
- [Pulse Is Free for Open-Source Projects and Nonprofits](https://ciphera.net/blog/free-analytics-for-open-source): Pulse's Business tier at €0 for OSI-licensed projects and nonprofits: five sites, 100,000 pageviews a month, every feature. We get to say you use Pulse.
- [Ciphera × Bunny: Second Place in HopStart Cohort #3](https://ciphera.net/blog/bunny-hopstart-second-place): Ciphera's public edge runs on Bunny, a Slovenia-based CDN. On 23 July 2026 Bunny's HopStart Cohort #3 put $25,000 in credits behind that choice.
- [Do You Need a Cookie Banner for Analytics? What EU Law Actually Requires (2026)](https://ciphera.net/blog/do-you-need-a-cookie-banner-for-analytics): The rule behind cookie banners isn't about cookies — it's about storing and reading information on a visitor's device. Here's what EU law actually requires for web analytics in 2026, why 'first-party' doesn't exempt you, and how a genuinely cookieless tool changes the question.
- [How to Migrate Off Google Analytics: A 2026 Guide](https://ciphera.net/blog/how-to-migrate-off-google-analytics): A practical, honest guide to leaving Google Analytics for a privacy-first tool in 2026 — the timeline you need to know, why teams are switching, what you genuinely gain and lose, and the step-by-step migration (including the historical-data trap nobody warns you about).
- [Is Your Website Analytics GDPR-Compliant? A 2026 Checklist](https://ciphera.net/blog/is-your-analytics-gdpr-compliant): GDPR applies to your analytics the moment it processes personal data — and an IP address usually counts. A practical, source-backed 2026 checklist: lawful basis, data minimisation, retention, international transfers, and the one design choice that collapses most of it.
- [The EU-US Data Privacy Framework Is Built on an Executive Order — and That's the Problem](https://ciphera.net/blog/eu-us-data-privacy-framework-executive-order): The DPF relies on an executive order, not legislation. With PCLOB gutted and FISA 702 lapsed in June 2026, 2,800+ companies face transfer uncertainty.
- [Why We Chose BunnyCDN as Ciphera's CDN](https://ciphera.net/blog/why-we-chose-bunnycdn): A CDN terminates TLS and sees every request. For a privacy company, choosing one is a trust decision. Here's the checklist we used, our actual setup, and what running it taught us.
- [Zero-Knowledge Encryption Guide (2026)](https://ciphera.net/blog/zero-knowledge-encryption-guide): What zero-knowledge encryption actually means — explained through the system we run in production: OPAQUE authentication, blind indexes, and a vault key that never leaves your browser.

## Policies
- Privacy policy: https://ciphera.net/privacy
- Terms of service: https://ciphera.net/terms
- AI training on this site's content is not permitted. Search indexing is allowed.

## Contact
- Email: hello@ciphera.net
- Address: De Kleetlaan 2, 1831 Diegem, Belgium

Full corpus (the company facts, the glossary, and every blog and learn article): https://ciphera.net/llms-full.txt