Privacy Policy

1. Data controller

The controller is Monolit Digital, S.L. (“Anonymetrics”), registered at Carrer Medes 4, 08023 Barcelona, España, tax ID B-05336086. Data-protection contact: info@anonymetrics.io.

2. Scope

This policy covers: (a) visitors to anonymetrics.io and app.anonymetrics.io; (b) our customers and registered users; and (c) processing we carry out on behalf of our customers when they use Anonymetrics to measure their own websites.

3. What data we process

3.1. Visitors to our website

We measure our own site in cookieless mode: we build no profiles and do not track you across sites. If you contact us or subscribe, we process the data you provide.

3.2. Customers and registered users

We process account data (name, email, hashed password), organization and billing data. Payments are handled by Stripe; we do not store full card numbers.

3.3. Data processed on behalf of our customers

• Cookieless mode (default): identity derived from a daily rotating hash of site, IP and user agent. The salt is discarded every 48h, so identifiers cannot be linked across days. The IP is never stored.
• Consent mode: if the customer's site has a banner and the visitor consents, a first-party cookie (anx_vid) is used.
• Heatmaps: anonymous relative click and scroll coordinates, with no screenshots.
• Session recordings: DOM reconstruction with form fields masked at source. “Do Not Track” is respected and recordings are kept for 30 days.

4. Purposes and legal bases

• Providing the service — performance of a contract (Art. 6(1)(b) GDPR).
• Aggregate analytics and improvement — legitimate interest (Art. 6(1)(f)).
• Non-essential cookies — consent (Art. 6(1)(a)).
• Billing and tax obligations — legal obligation (Art. 6(1)(c)).

5. Retention

We keep data only as long as necessary for each purpose. Daily identifiers are not linkable across days; recordings are deleted after 30 days; billing data is kept for legally required periods.

6. Recipients and processors

• Supabase — database and authentication (hosted in the EU, Ireland).
• Vercel — hosting and delivery of the app and the website (EU deployment, Dublin).
• Monolit AI — language models on our own EU infrastructure, used for automatic insights. No third-party AI providers are involved.
• Cloudflare — delivery network and edge ingestion.
• Stripe — payment processing.
• Resend — transactional emails and alerts.
• Google — when you voluntarily connect Search Console (section 9).

7. Hosting and international transfers

Analytics data is stored in the European Union (Ireland). Some providers (Cloudflare, Stripe, Resend) may process data outside the EEA under the Standard Contractual Clauses.

8. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw consent, by writing to info@anonymetrics.io. You may also lodge a complaint with your data-protection authority (in Spain, the AEPD, www.aepd.es).

9. Use of Google API data

If you connect Google Search Console, we request read-only access (webmasters.readonly) solely to show you the search performance and indexing metrics of your own sites.

Anonymetrics's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements: we do not use it for advertising, do not sell or share it, store tokens securely, and you can revoke access at any time.

10. Minors

The service is aimed at businesses and professionals; we do not knowingly collect data from minors.

11. Security

We apply technical and organizational measures (encryption in transit, role-based access control, per-organization isolation) appropriate to the risk.

12. Changes

We may update this policy; the current version will be published on this page with its date.

13. Contact

Monolit Digital, S.L. · Carrer Medes 4, 08023 Barcelona, España · info@anonymetrics.io