How privacy-first analytics works
What UserMetric measures, what it deliberately does not, and how long anything is kept.
What we do not collect
No cookies, no fingerprinting, no cross-site identifiers. Visits are counted with a rotating daily hash that cannot be reversed into a person.
- No personal data leaves your region.
- IP addresses can be discarded entirely.
- Every metric is derived from the request itself.
Retention
| Data | Kept for |
|---|---|
| Aggregated pageviews | Indefinitely |
| Individual sessions | 90 days |
| Session replays | 30 days |
Configuring it
Set ip_storage_is_enabled to off and IP addresses are never written to disk.
Questions about any of this? Get in touch.