Skip to main content

Data Location & Retention

Sealmetrics is committed to data sovereignty and transparent retention policies.

Data Location​

Customer Analytics Data: Dublin, Ireland​

All customer analytics data — every hit, report, and backup — is stored and processed in Dublin, Ireland (EU):

ComponentLocationProvider
Application serversDublin, IrelandEU data center
Analytics databaseDublin, IrelandEU data center
BackupsDublin, IrelandEU data center

Why EU?​

  • GDPR compliance — Data stays within EU jurisdiction
  • Data sovereignty — No US CLOUD Act concerns for stored data
  • Low latency — Fast response times for European users
  • Legal clarity — Single regulatory framework

No Transfer of Analytics Data Outside the EU​

Analytics data is hosted and processed only in the EU (Dublin). Your analytics data:

  • Is stored and processed exclusively on EU infrastructure
  • Is not transferred to any third country
  • Remains under EU data protection law

Data Retention Periods​

Analytics Data​

Retention is fixed and identical for every plan, enforced by database TTLs:

Data TypeRetentionNotes
Event-level detail1 dayIndividual hit data, then purged
Hourly aggregates90 daysHour-by-hour reports
Daily aggregates24 monthsDaily/monthly reports
Conversion data24 monthsIncluding properties

From a single hit to the reports you keep, every stage lives in Dublin and expires on its own TTL:

Operational Data​

Data TypeRetentionNotes
Raw logs1 dayFor debugging only
Error logs30 daysSystem diagnostics
API access logs90 daysSecurity audit trail

Real-time / Session Data​

Data TypeRetentionNotes
Session state (Redis)2 hoursEphemeral, in-memory session grouping

Why 24 Months?​

The 24-month retention for aggregated reports and conversions allows:

  1. Year-over-year comparison — Compare current month to same month last year
  2. Seasonal analysis — Full 2-year cycle for seasonal businesses
  3. Trend identification — Long-term patterns become visible
  4. Regulatory compliance — Meets typical audit requirements

Data Deletion​

Automatic Deletion​

Data older than retention period is automatically purged:

  • Runs daily during low-traffic hours
  • Irreversible deletion
  • No recovery possible

Manual Deletion​

You can request early deletion:

  1. Single account — Contact support
  2. Specific date range — Provide details
  3. Full account deletion — Account closure

Account Closure​

When you close your account:

  • All data deleted within 30 days
  • Backups purged within 90 days
  • No data retained after that

What We Store​

Collected Data Points​

DataStoredPurpose
Page URLYesPage analytics
ReferrerYesTraffic sources
UTM parametersYesCampaign tracking
Device infoYesDevice reports
BrowserYesBrowser analytics
CountryYesGeographic reports
TimestampYesTiming analysis
Session IDYes (hashed)Session grouping

Not Stored​

DataStoredWhy
IP addressNoPrivacy
CookiesNoConsentless
EmailNoNot collected
NameNoNot collected
User IDNoPrivacy

Data Security​

Encryption​

StateEncryption
In transitTLS 1.3
At restAES-256
BackupsAES-256

Access Control​

  • Role-based access
  • Audit logging
  • Two-factor authentication available
  • IP allowlist option

Regulatory Compliance​

FrameworkStatus
GDPRCompliant
ePrivacyCompliant

Sealmetrics does not hold third-party security certifications (such as SOC 2 or ISO 27001). Compliance with GDPR and ePrivacy is based on the architecture described above — nothing stored on the device, no data that identifies anyone, a session identifier that rotates daily and cannot be reconstructed, EU-only processing — and is documented in the compliance self-assessments.

Subprocessors​

Sealmetrics keeps its subprocessor list deliberately short. The authoritative, always-current list is Annex 3 of the Data Processing Agreement.

As of this review it names Noraina Limited (Ireland — infrastructure and database hosting), Scaleway SAS (Paris — managed LLM inference for Seal AI Private) and Resend (US, under SCCs — service emails). All subprocessors sign data processing agreements that bind them to GDPR obligations. Visitor analytics data is processed and stored exclusively in the EU.

Full details: Subprocessors

Data Portability​

Export your data anytime:

  1. Dashboard exports — CSV downloads
  2. API access — Full programmatic access
  3. Bulk export — Contact support for large exports

Questions?​

Written and maintained by the Sealmetrics Team