When we receive an event from a visitor, we use their IP address to look up their country and region, and then we immediately forget their IP address and only store these two pieces of information.

This means that we never know the specific location of a visitor (e.g., their city, or street), and only store the broad location so it can be reported on in aggregate (”how many visitors do we get from California?”).

We don’t believe analytics has any morally defensible need to store more accurate geographic data on visitors than this.