# A visitor asks about their data

> How to answer a visitor of your site who asks under the GDPR what Nvivio knows about them, or to delete it, in privacy mode and in cookie mode.

Under the GDPR, a visitor of your site can ask to see their data or to have it deleted. For the data Nvivio collects on your site, you decide and Nvivio processes for you ([Data Processing Agreement](https://nvivio.com/legal/dpa)), so the request is yours to answer, usually within one month. Nvivio makes it quick.

## 1. Which mode does the site use?

Next to the site name, the dashboard shows the mode, such as "Privacy mode"; **Settings › Privacy** says it too ([Privacy and GDPR](https://nvivio.com/docs/privacy)).

## 2a. In privacy mode (the default)

Nvivio sets no cookie and stores no IP address, and the code that recognises a visitor changes every day. After the day of a visit, nothing links that visit to a person any more, so in practice there is nothing to export or delete. You can answer, for example:

> We measure our website with Nvivio, without cookies. Nvivio does not store your IP address or anything on your device, and recognises a visitor for one day only, with a code that changes every day. After that day, your visits can no longer be linked to you, so we hold no data that we can find as yours.

If they ask on the day of their visit and you can find it, for example by its time and page in [Visitors](https://nvivio.com/docs/visitors), you can still export or delete it as below.

## 2b. In cookie mode

The visitor's code is on your privacy page, in the [objection box](https://nvivio.com/docs/privacy#visitors-can-object): `c:` and a code. Ask the visitor to send you that code, then:

1. Open **Visitors**, choose **Filter › Visitor** and paste the code (or add `f=visitor:c:…` to the address).
2. Open one of their visits.
3. Under **This visitor's data**, choose **Export** for a JSON file with every visit, event and label Nvivio keeps about them on this site, or **Delete** to remove all of it for good ([Export or delete one visitor](https://nvivio.com/docs/privacy#export-or-delete-one-visitor)).

Only admins and owners of the site see these buttons. API: `GET /v1/sites/{site}/visitors/{visitor}/export` and `DELETE /v1/sites/{site}/visitors/{visitor}`.

## They do not want to be counted

Point them to the objection box on your privacy page: one untick and they are no longer counted on any of your subdomains. A browser that sends Global Privacy Control is never counted at all ([Visitors can object](https://nvivio.com/docs/privacy#visitors-can-object)).

## A visitor who writes to Nvivio

Visitors sometimes write to us instead of to you. We then pass the request on to you, as the site owner, and help you answer it ([Privacy Policy](https://nvivio.com/legal/privacy)).

## Your own data at Nvivio

As a customer, your account data (your email address, organisations and settings) is Nvivio's to handle. To get a copy, have it corrected or deleted, email support@nvivio.com from the address of your account; see [Close your account](https://nvivio.com/docs/close-account).