Privacy: Analytics
Last updated: 1 October 2026
Analytics is part of Meta-Me. The Meta-Me privacy policy is the main document — it covers your account data, why we process it, how long we keep it, who our subprocessors are, and how to exercise your rights. It applies here in full. This page adds what Analytics stores, both about you and about the people who visit the sites you track.
1. About you
- The sites you track — a name, the allowed origin, and the fact that you own it.
- Sharing — if we have given another Meta-Me user read-only access to one of your sites at your request, who that is.
2. About visitors to your sites
This is the part worth reading carefully, because it is designed so that it stops being personal data almost immediately.
- What is recorded: the page visited (its path only, never
anything after a
?in the address, where sites sometimes put an email address or a token), referrer, how long the page was open, scroll depth, and coarse technical details — device type, browser, operating system, screen width, language, country and any campaign tags in the link. If the site counts an action withmmAnalytics.track, the action's name and whatever details the site attaches are stored as given, so a site should name actions and never people. - What is not: nothing is stored in the visitor's browser (no cookies, no local or session storage), no IP address is stored, and no identifier follows a visitor between days or between sites.
- How visitors are counted: to count one person visiting five pages as one visit rather than five, we compute a hash of the visitor's IP address and browser combined with a secret salt. That salt is randomly generated each day and destroyed at the end of it. Once the day has passed the hash cannot be traced back to a person by anyone, ourselves included.
Because the salt is destroyed, yesterday's analytics are anonymous rather than merely pseudonymous. There is no personal data left in them to expire, correct or erase, which is why they are kept indefinitely.
3. Roles
For your own account we are the controller. For the visitor data collected from sites you have chosen to track, you are the controller and we act as your processor. You are responsible for telling your visitors that you measure their visits — a line in your own privacy notice pointing at this page is usually enough, and no cookie banner is required because nothing is stored in their browser.
4. AI processing
If you ask the assistant about your figures, the relevant aggregated statistics are sent to Google Gemini to produce an answer. Gemini API requests are excluded from model training under Google's terms. The legal basis is your consent, which you can withdraw at meta-me.uk/settings/privacy.
5. Retention and deletion
Visitor statistics are anonymous and are kept indefinitely. Your own records — the sites you track and who you have shared them with — are kept until you remove them or delete your Meta-Me account. Removing a tracked site stops further collection.
6. Your rights
For your own data, see meta-me.uk/settings/privacy or email [email protected]. Visitor statistics cannot be linked back to an individual, so they cannot be retrieved or erased on request — there is nothing to match a request against. You also have the right to complain to the ICO.