Nothing loads from another company until you say so

Load the XPmetric homepage with cookies rejected and it now talks to exactly one company. Us.

Google Analytics is not merely told to behave, it is never fetched at all until you opt in. The favicon preview on the homepage and the profile pictures on the demo chart are served from our own servers instead of Google's and X's, so declining costs you nothing. Launch directory badges are hosted here too. The testimonial widget is the only piece that still needs an outside company, so it waits behind a placeholder that tells you who receives your address before you choose to load it.

The privacy policy has been rewritten to match. It now names who runs XPmetric, the legal basis for each thing we do, every company that receives data and where they sit, how long each kind of data is kept, and which authority to complain to. There is a table of every cookie and storage item the site sets, including the one that remembers your consent choice.

One thing it says plainly rather than glossing over. Our web server still writes visitor IP addresses to its own log, separate from the analytics databases, and that is being removed next.