# illun

> Server-side visibility for the AI agents that read your website. A small collector inside your own app classifies agent requests and sends a minimal, sanitised event to an EU-hosted service. No IP addresses, cookies, query strings or visitor data leave your infrastructure.

Last updated: 2026-09-07

## Facts

- What it measures: requests from identifiable AI agents (ChatGPT-User, Claude-User, Perplexity-User, DuckAssistBot, OAI-SearchBot, PerplexityBot, GPTBot, ClaudeBot and others), the pages they request, and whether the identity was verified against the vendor's published address ranges or merely claimed.
- What it does not measure: people, sessions, or agents that use an ordinary browser identity.
- Where it runs: inside your Next.js proxy/middleware (other frameworks via the framework-agnostic core).
- What leaves your app: agent name and kind, a normalised user-agent token, verification result, path (no query string), section, format, first Accept media type, referrer host, timestamp, a per-request id, and a count. Nothing else.
- Where data is stored: EU, by a European operator. Raw events 14 days by default; aggregates 15 months. Self-hosting uses the same Docker Compose file.
- Cookies: none. Consent banner: not required for the collector.
- Licence: collector and rules are MIT; the backend is source-available.

## Install

pnpm add @illun/collector-next

## Docs

- /docs/event-schema — exactly what an event contains
- /docs/privacy — retention, hosting, sub-processors
- /agents — live view of agents reading this site