Privacy Policy

1. Overview

MetricStreaming (“we”, “us”) provides an open-source web metrics streaming platform. This privacy policy covers both our open-source software and our managed cloud service at metricstreaming.org.

2. Self-hosted Deployments

If you self-host MetricStreaming, all data stays on your infrastructure. We collect no data from self-hosted instances. The software is Apache 2.0 licensed — you control everything.

3. Cloud Service Data Collection

For our managed cloud service, we collect:

• Account information (email, name) for authentication
• Web performance metrics (LCP, CLS, INP, TTFB, FCP) sent by the SDK
• Page URLs and anonymized user agent strings for metric aggregation

We do not collect:

• Cookies on end-user browsers
• Personally identifiable information (PII) from site visitors
• IP addresses of site visitors (hashed for rate limiting, not stored)

4. Data Processing & Storage

Cloud data is processed and stored in the United States (us-east-1) and the European Union (eu-west-1). You can choose your data region during account setup. We use industry-standard encryption at rest and in transit.

5. Data Retention

Metric data is retained according to your plan tier (30, 90, or 365 days). Account data is retained while your account is active and deleted within 30 days of account closure upon request.

6. Your Rights

Under GDPR and CCPA, you have the right to access, correct, delete, or export your data. Contact us at [email protected] to exercise these rights.

7. Third Parties

We do not sell, rent, or share your data with third parties for marketing purposes. We use Stripe for payment processing and standard infrastructure providers (AWS, Cloudflare) for hosting.

8. Contact

For privacy inquiries: [email protected]