Skip to content
European Data Processing

Privacy is Not an Afterthought, It's Our Foundation

We built TrueMetric because we believe you shouldn't have to choose between getting valuable website insights and respecting your visitors' privacy. Here’s how we achieve both.

No Cookies, Period.

TrueMetric does not use any browser cookies (first-party or third-party) or other persistent client-side storage mechanisms (like localStorage) for tracking visitors.

This means:

  • Immunity to cookie consent banner fatigue and rejection for analytics tracking.
  • Compliance with PECR (ePrivacy Directive) requirements regarding cookie usage for analytics.
  • Tracking works even if users block cookies or clear them frequently.
  • No cross-site tracking capabilities via cookies.

Strict IP Address Handling

Visitor IP addresses are considered personal data under GDPR. We handle them with extreme care:

  • IPs are used only momentarily in memory during the request.
  • We use the IP solely for deriving geographic location (Country/Region/City) and generating a daily `visitId`.
  • The full IP address is never stored on disk or in our database logs.
  • This process makes it impossible to identify or track an individual user via their IP address over time in our system.

Pseudonymous Daily Visits

To count unique visitors within a single day without cookies or IPs, we generate a temporary, pseudonymous identifier (`visitId`).

  • It's created by hashing the (discarded) IP address, User Agent string, website ID, and the current date with a unique daily salt.
  • This allows us to recognize page views from the same visitor *within the same 24-hour period* for accurate daily counts.
  • Because the salt changes daily and IPs aren't stored, it's impossible to link visits from the same person across different days.

Minimal Data Collection

We only collect the data absolutely necessary to provide core web analytics:

  • Page URL
  • Referrer URL
  • User Agent string (for browser/OS/device type)
  • Derived Geographic Location (Country/Region/City - from discarded IP)
  • UTM parameters (if present)
  • Screen resolution
  • Pseudonymous daily `visitId`

We do not collect granular user flow paths, mouse movements, form inputs, or any other potentially sensitive behavioral data.

European Data Sovereignty

All analytics data collected by TrueMetric's hosted solution is processed and stored on infrastructure located within the European Union.

This helps businesses comply with GDPR data transfer requirements and addresses concerns about data access by non-EU authorities. For ultimate control, explore our self-hosting option.

Compliance by Design

TrueMetric's architecture is fundamentally aligned with GDPR, CCPA, and PECR principles. By avoiding cookies for tracking and never storing personal data like IP addresses long-term, you can often use TrueMetric for essential website analytics without needing a separate analytics consent banner, simplifying your user experience and potentially increasing data capture rates compared to consent-gated platforms.

Disclaimer: Always consult with a legal professional to ensure compliance for your specific situation and data usage.

Need Help With Your Privacy Policy?

To help you accurately describe how TrueMetric works on your site, here's some sample language you can adapt. Remember to integrate it thoughtfully into your overall privacy policy.

Important Disclaimer

This is sample language, not legal advice. You are responsible for ensuring your privacy policy accurately reflects all your data practices (not just analytics) and complies with applicable laws (like GDPR, CCPA, PECR, etc.) in your jurisdiction(s). Always have your final privacy policy reviewed by a qualified legal professional.

Sample Language: Website Analytics

We use TrueMetric to collect anonymous information about how visitors use our website. TrueMetric is a privacy-focused analytics tool that helps us understand website traffic and improve user experience without compromising individual privacy. It operates without using cookies and does not store visitors' full IP addresses.

Data Collected via TrueMetric:

TrueMetric provides us with aggregated insights by collecting the following types of information:

  • Page URL
  • Referrer URL
  • User Agent string (for browser/OS/device type)
  • Derived Geographic Location (Country/Region/City - from discarded IP)
  • UTM parameters (if present)
  • Screen resolution
  • Pseudonymous daily `visitId`

Data NOT Collected or Stored by TrueMetric:

  • Personally Identifiable Information (PII)
  • Full IP addresses (only processed momentarily for geo-location)
  • Tracking cookies or data from local browser storage
  • Information that allows tracking users across different websites or over time (beyond a single day's pseudonymous session)
  • Sensitive data like form inputs or detailed user interactions

Purpose of Data Collection:

The anonymous, aggregated data collected through TrueMetric is used solely for the purpose of:

  • Understanding how our website is used (e.g., popular pages, traffic sources).
  • Improving website content, performance, and usability.
  • Measuring the effectiveness of marketing campaigns (via UTM parameters).
  • Generating aggregated statistical reports about website activity.

This data helps us make informed decisions to enhance the website for our visitors.

Remember to tailor this language to fit the context of your full privacy policy. For the original full template (which includes sections not shown here and requires careful legal review), see our Privacy Policy Template page.

Have Questions About Our Approach?

We believe in transparency. Reach out to us if you have specific questions about our privacy practices or how TrueMetric fits your compliance needs.