Privacy Policy

01Who we are

Metryo provides privacy-first website analytics. When we say “we” in this document we mean the operator of metryo.io. When we say “you” we mean the account holder using Metryo to measure their website.

02Data we collect about you

Accounts are created by signing in with GitHub or Google, so we never handle a password. From that provider we receive your name, your email address and the URL of your profile picture, and we store those along with your plan. The picture is shown only to you, in your own dashboard, and is refreshed from the provider each time you sign in.

We keep operational records such as the websites you add, their settings, and monthly usage counters, because the product cannot work without them.

03Data we collect about your visitors

The tracking script collects: page URL, referrer, country, device type, browser, operating system, screen size and UTM parameters. It does not use cookies and does not follow visitors across other websites.

On paid plans the script also records clicks: elements you have marked in your own markup, links leading to another website, and links to downloadable files. A click is stored as an event name plus the properties you chose, and for links the destination domain, URL and visible link text. It never records keystrokes, form field values, mouse movement, or the contents of the page.

Visitor identity is approximated with a salted hash that rotates every month. Raw IP addresses and user agents are used in memory to compute this hash and traffic-quality signals, and are not stored with your analytics data.

04How long we keep data

Analytics events are kept for the retention period of your plan (30 days to 24 months). Expired events are cleared by a periodic sweep rather than at an exact deadline, so an event can briefly outlive its window before it is removed.

Deletion you ask for is immediate: you can shorten the retention window per site, delete a site's data, delete a site, or delete your whole account at any time from the dashboard, and each of those takes effect straight away.

05Sub-processors

We use a database host to store your account and analytics data, and it receives only the minimum data needed for that job. Geolocation and network classification run against databases held on our own servers, so visitor IP addresses are not shared with any third party.

06Your rights

You can export any date range as a CSV of raw events straight from your dashboard, on every plan, and erase data with the built-in deletion tools. We do not sell personal data, we do not run advertising, and we only disclose data when legally required.

Questions? Email privacy@metryo.io — we answer privacy mail first.