Back
Methodology›Privacy approach

Privacy approach

Pine59 products are built for statistical use only. We never publish data that can be linked to an individual person, and we apply complementary technical mechanisms across our datasets to enforce that. Exactly which mechanisms apply, and with which parameters, depends on the country and the signal behind it, so see your country's methodology for the specifics.

What this means in practice

  • Aggregation only. All outputs are aggregates over visitors, locations, and time periods. No individual device identifiers cross the boundary, and raw coordinates are never exposed; data is published at administrative levels or grids, not as individual location points.
  • Rounding. Published figures are rounded (for example visit counts to whole people), so no output implies a precise individual observation.
  • Minimum thresholds, where they apply. In some countries a statistic is only published when it represents enough visitors, and smaller aggregates are suppressed entirely. See K filtering for the detail and the consequences for category sums.
  • Noise, where it applies. On some datasets (for example trips and origin-destination aggregates) a small unbiased random adjustment is added so any single individual's contribution is indistinguishable from background noise. See Differential privacy.

Which of these apply, and with which parameters, depends on the country and the signal behind it; each country's methodology page describes the specifics.

Where it applies

In United States this applies to GPS. Each dataset's page shows the model that instantiates it.

Did you find what you were looking for?