Trust & privacy

Clear answers about your data

XPmetric gives site owners analytics without a cross-site visitor profile. The default cookieless identifier changes each day; an optional cookie mode enables longer journeys only when a site owner chooses it. Here are the documents and contacts behind those choices.

Where your data lives

XPmetric's application and analytics databases are hosted with Hetzner in Germany. Our published sub-processor list records the current location as awaiting confirmation. Cloudflare handles requests at its global edge, and optional email, payment and Google services may process data outside the EU. The full recipient and transfer details are in the sub-processor list and privacy policy.

Documents & contacts

Privacy policy What we collect, why, and how you can exercise your rights.Datenschutzerklärung German translation of the privacy policy.Retention periods How long each category of data stays with us.Terms of service The terms for using XPmetric.Impressum Operator and contact details.Legal notice English translation of the operator details.Data processing agreement Our draft Art. 28 agreement for site owners.Technical measures The security measures in Annex II of the DPA.Sub-processors The providers involved in processing customer data.Security contact How to report a security issue.

The DPA, technical measures and sub-processor inventory reflect the current code audit. Some provider contracts and locations still need confirmation. For a privacy request, write to privacy@xpmetric.com.