Privacy Policy

How MetriXs handles your data as a customer, and the rights you have over it.

TL;DR. We collect the minimum needed to run your account and send you the emails you expect. We never sell your data. Website visitor data (collected via the tracker) is covered separately in our Data Policy.

Data controller

MetriXs Analytics, Wethouder Hollaan 24, 3984 KC Odijk, Netherlands (KVK 63879131), is the data controller for the account data described in this policy. For the visitor data collected on behalf of your website, MetriXs acts as a data processor, see the Data Policy and our Data Processing Agreement.

Contact for privacy matters: privacy@metrixs.eu.

Two types of data

MetriXs handles two distinct categories of data, each under a different legal role:

Website visitor data (your visitors)

Collected via the MetriXs tracker on your site. MetriXs processes this as a data processor on your behalf. No personal data is stored. See the Data Policy.

Customer account data (you)

Your email, name, and billing details. MetriXs processes this as a data controller. This policy covers this category.

What we collect and why

Account information

Email, name, and a bcrypt-hashed password, to log in, verify your account, and send service emails.

Team & site data

Team name, members, invites, and the site domains you track, to manage shared workspaces.

Billing

Subscription and invoice references via Mollie. Card details never touch MetriXs, handled entirely by Mollie.

Service & security emails

Verification, password reset, and email-change confirmation, sent to your address.

Legal bases for processing

Contract (Art. 6(1)(b)), to provide the MetriXs service: account access, billing, and essential functionality like maintaining your logged-in session.
Legitimate interest (Art. 6(1)(f)), to operate, secure, and improve the service, including fraud and abuse prevention.

Subprocessors

We use a small number of trusted providers to operate the service. Each is bound by contract and processes data only on our instructions:

Hetzner Online (Germany), server infrastructure and hosting.
Mollie (Netherlands), payment processing.
Lettermint (EU), transactional email delivery.
MaxMind , the GeoIP database, downloaded and run locally. No visitor data is sent to MaxMind.

For the full list and details, see our Subprocessors page. All subprocessors that process customer or account data are EU-based and process data within the EU; no Standard Contractual Clauses are required.

Data retention

We retain your account data for as long as your account is active and as necessary to provide the service. Visitor analytics data is retained according to your plan’s retention window (see the Data Policy).

Time-limited tokens (email verification, password reset) expire automatically, within 1 hour for password resets and 24 hours for email verification.

You can delete your account at any time from your settings. All your data, account, teams, sites, subscriptions, and analytics, is permanently deleted without undue delay. Your Mollie subscription is cancelled first so you are never charged for a deleted account.

Your rights

Under the GDPR, you have the right to:

Access

the personal data we hold about you

Correct

inaccurate data about you

Delete

your data (right to be forgotten)

Object

to processing where applicable

Portability

receive your data in a portable format

Withdraw consent

where processing was based on consent

To exercise any of these rights, email privacy@metrixs.eu. We respond within one month, as required by law.

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

International transfers

All processing of your account data happens within the EU. Our subprocessors are EU-based and process data within the EU, so no Standard Contractual Clauses are required. Visitor analytics data never leaves the EU. See Subprocessors for details.

Security

We take reasonable technical and organisational measures to protect your data, including TLS encryption in transit, bcrypt password hashing, rate limiting, and bot detection. See our Security page for an overview.

Changes to this policy

We may update this policy to reflect changes in our practices or legal requirements. Significant changes will be announced on our website or by email. The "Last updated" date at the bottom of this page indicates when it was last revised.

Contact

For any questions about this policy or your data, contact privacy@metrixs.eu or write to the address on our Imprint page.

Last updated: July 2026