Cookie Policy
This is the whole inventory, not a summary. The public website sets no cookies at all. The application sets one, and it exists only to keep you signed in.
The short version
- No analytics cookies. No Google Analytics, no Plausible, no Cloudflare, no heat map, no session recording.
- No marketing or advertising cookies. No pixels, no retargeting, no affiliate tracking, no social plug-ins.
- No third-party cookies of any kind. The security policy of this site does not permit external requests, so a third party could not set one even if something tried.
- No fingerprinting. We do not read your fonts, canvas, battery or device list to identify you.
The only cookie
| Name | Where | Purpose | Lasts | Type |
|---|---|---|---|---|
metrica_session |
Set by the application when you sign in; path / |
Keeps you signed in from one page to the next | 8 hours of inactivity, or until you sign out | Strictly necessary |
It contains an opaque session identifier — a random string, not your name or
email — and the rest of the session lives in a file on the server, outside the
public web root. The cookie is marked HttpOnly (scripts cannot read
it), Secure (sent only over HTTPS) and SameSite=Lax
(not sent by other sites).
It is strictly necessary: without it you cannot sign in, because the application would not know who you are between two clicks. Under European rules a cookie like this does not require consent, which is why there is no banner on this site.
Two details, stated exactly: the cookie's path attribute is /, so your
browser may also attach it to other requests on this domain — it carries only the
random session identifier, and nothing outside the application reads it. And it
is the only cookie that exists: no other name is ever set, on any path.
What is stored that is not a cookie
| What | Where it lives | Contains |
|---|---|---|
An offline copy of the public pages (cache
metrica-v1) |
Your browser, on your device | The site's own HTML, CSS, icons and pages so it opens without a connection. No personal data. |
| Your session record | Our server, outside the web root | Who is signed in and the interface language. The browser holds only the identifier above. |
The application itself is deliberately kept out of the offline cache, so business data is never written to your device by the service worker.
Other storage we do not use
No localStorage, no sessionStorage, no IndexedDB and no
device permissions (location, camera, microphone, notifications). If this ever
changes, this page changes first.
How to control it
- Sign out and the cookie is deleted immediately.
- Blocking cookies in your browser will prevent sign-in, because there is no other way to keep a session.
- Clearing site data also removes the offline copy; the site will simply download it again next time you visit.
Questions
Write to andrei@metricahq.com with “Metrica cookies” in the subject line. How we handle personal data more generally is described in the Privacy Policy.