Privacy policy

1. The controller

The Metrimato service is provided by Phenomenal Development Oy, Finland, which is also the controller. Being the controller covers the customer's own user details: name, email address, password hash and login sessions. Visitor identifiers are not stored as part of the analytics data of tracked sites, see sections 3 and 4.

Privacy matters: [email protected]

2. In brief

Metrimato is an analytics service designed so that visitor identifiers are not stored as part of the analytics data of tracked sites. We set no cookies, store no IP addresses and build no browser fingerprint.

3. What is collected about site visitors

The following is stored for every event:

• the page path without query parameters (except UTM campaign parameters)
• the referring site's domain, never the full URL
• the traffic channel (direct, search, social, referral, campaign, email)
• browser and its major version, operating system, device type, screen size class
• country code from the CDN header and the browser's language setting
• timestamp, time spent on the page and scroll depth as a percentage
• the per-day visitor hash (see section 4)

If the site uses its own search, we store the typed search term lowercased and at most 80 characters long. The term belongs to a visit, not to a person, and the site owner can turn search tracking off in the site settings or on the tracking snippet. We advise against collecting search on sites where sensitive information gets typed into the search box.

We do not store the IP address, the user agent string, cookies, device ids, precise location or anything that could identify a visitor.

Optional AI analysis

More sales sends aggregate traffic figures and selected public page text to OpenAI when the customer starts an analysis or enables weekly analysis. Processing may take place outside the EU/EEA. Individual visits, visitor hashes and event properties are not sent. Metrimato retains source excerpts and aggregate results for no longer than the site’s analytics retention period. Full page text is processed in memory. API response storage is disabled; this does not disable the provider’s own abuse monitoring retention.

4. How the visitor hash is formed

So that pageviews can be joined into a single visit, an irreversible hash is computed from them. The original details cannot be computed back from it.

The random value behind the hash changes daily, and old values are deleted within two days. After that the hash cannot be recomputed or joined to anything. The hash is per site, so data from different sites cannot be combined.

5. Roles

The site owner (our customer) decides on taking tracking into use. Metrimato does not store visitors' IP addresses, browser identification strings or persistent visitor identifiers. Technical request data such as the IP address and the browser identification string may be processed transiently while a request is handled, but it is not stored as part of the analytics data. For the customer's own user details (name, email, password hash, sessions) Metrimato is the controller.

6. Retention periods

• Event and visit data: the period the customer chooses, at most what the subscription allows (24 months, 36 with Pro)
• Daily random values: 2 days
• Sign-in sessions: 30 days from last use
• The customer's user details: for as long as the account exists

Expired data is deleted by an automatic nightly job.

7. Security

• All traffic is encrypted (HSTS, HTTPS only)
• A strict Content Security Policy, no third-party resources
• Passwords are stored as secure password hashes, sessions in signed cookies
• Rate limiting and strict input validation on the API
• Servers and backups in the EU

8. Your rights

As a customer you can export your account's data in machine-readable form and delete the account with all of its data at any time in account settings. For visitors, requests cannot be targeted, because the data cannot be tied to a person.

9. Contact

Privacy matters: [email protected]