Data Location & Retention
SealMetrics is committed to data sovereignty and transparent retention policies.
Data Location
Primary Infrastructure
| Component | Location | Provider |
|---|---|---|
| Application servers | Dublin, Ireland | EU data center |
| Analytics database | Dublin, Ireland | EU data center |
| Backups | Dublin, Ireland | EU data center |
Why EU?
- GDPR compliance — Data stays within EU jurisdiction
- Data sovereignty — No US CLOUD Act concerns
- Low latency — Fast response times for European users
- Legal clarity — Single regulatory framework
No Data Transfer Outside EU
Your analytics data:
- Never leaves EU borders
- Is not processed by US companies
- Is not subject to foreign data requests
- Remains under EU data protection law
Data Retention Periods
Analytics Data
| Data Type | Retention | Notes |
|---|---|---|
| Aggregated reports | 24 months | Monthly/daily aggregations |
| Pageview data | 24 months | Individual hit data |
| Conversion data | 24 months | Including properties |
| Funnel data | 24 months | Multi-touch attribution |
Operational Data
| Data Type | Retention | Notes |
|---|---|---|
| Raw logs | 14 days | For debugging only |
| Error logs | 30 days | System diagnostics |
| API access logs | 90 days | Security audit trail |
Real-time Data
| Data Type | Retention | Notes |
|---|---|---|
| Live visitors | 5 minutes | In-memory only |
| Recent hits | 24 hours | For real-time reports |
Why 25 Months?
The 24-month retention allows:
- Year-over-year comparison — Compare current month to same month last year
- Seasonal analysis — Full 2-year cycle for seasonal businesses
- Trend identification — Long-term patterns become visible
- Regulatory compliance — Meets typical audit requirements
Data Deletion
Automatic Deletion
Data older than retention period is automatically purged:
- Runs daily during low-traffic hours
- Irreversible deletion
- No recovery possible
Manual Deletion
You can request early deletion:
- Single account — Contact support
- Specific date range — Provide details
- Full account deletion — Account closure
Account Closure
When you close your account:
- All data deleted within 30 days
- Backups purged within 90 days
- No data retained after that
What We Store
Collected Data Points
| Data | Stored | Purpose |
|---|---|---|
| Page URL | Yes | Page analytics |
| Referrer | Yes | Traffic sources |
| UTM parameters | Yes | Campaign tracking |
| Device info | Yes | Device reports |
| Browser | Yes | Browser analytics |
| Country | Yes | Geographic reports |
| Timestamp | Yes | Timing analysis |
| Session ID | Yes (hashed) | Session grouping |
Not Stored
| Data | Stored | Why |
|---|---|---|
| IP address | No | Privacy |
| Cookies | No | Consentless |
| No | Not collected | |
| Name | No | Not collected |
| User ID | No | Privacy |
Data Security
Encryption
| State | Encryption |
|---|---|
| In transit | TLS 1.3 |
| At rest | AES-256 |
| Backups | AES-256 |
Access Control
- Role-based access
- Audit logging
- Two-factor authentication available
- IP allowlist option
Compliance Certifications
| Standard | Status |
|---|---|
| GDPR | Compliant |
| ePrivacy | Compliant |
| SOC 2 Type II | In progress |
| ISO 27001 | Planned |
Subprocessors
SealMetrics uses minimal subprocessors:
| Subprocessor | Purpose | Location |
|---|---|---|
| Hetzner | Infrastructure | Germany/Finland |
| Cloudflare | CDN/DDoS protection | EU edge |
All subprocessors:
- Sign data processing agreements
- Are GDPR compliant
- Process data only in EU
Data Portability
Export your data anytime:
- Dashboard exports — CSV downloads
- API access — Full programmatic access
- Bulk export — Contact support for large exports
Questions?
- DPO contact — privacy@sealmetrics.com
- Data requests — support@sealmetrics.com
- Legal inquiries — legal@sealmetrics.com