Privacy policy
Who's responsible for your data
Metrics is operated by Grégoire Marty, trading as GM Online (French micro-entrepreneur). For any privacy-related request, write to hello@hey-metrics.com.
This policy explains, in plain language, what we collect, why, and what your rights are under the General Data Protection Regulation (GDPR / EU 2016/679) and the French Data Protection Act (loi Informatique et Libertés).
What we collect
We try to keep this list as short as possible. Here's everything :
| Data | Why | Where it lives |
|---|---|---|
| Your email address | Authentication (magic link), account identification, transactional emails (billing receipts, password-free login) | Our SQLite database on the OVH server; Brevo (email delivery) |
| Subscription tier (Free / Beta / Pro) | Knowing what content you can access | Our SQLite database |
| Lemon Squeezy customer ID | Linking your account to your payment record | Our SQLite database; Lemon Squeezy |
| Newsletter consent (if subscribed) | Sending you our newsletter — only if you signed up | Brevo (email service) |
| Technical server logs (IP, user agent, request paths) | Security, abuse prevention, debugging | Our OVH server, rotated automatically |
What we don't collect : no advertising trackers, no third-party analytics, no fingerprinting, no behavior profiling, no data sold or shared with third parties beyond what's strictly necessary to run the service.
Legal basis (Art. 6 GDPR)
- Contract — email + subscription tier are necessary to provide the service you signed up for.
- Consent — newsletter, and any optional feature. You can withdraw at any time.
- Legitimate interest — server logs, used strictly for security and reliability.
- Legal obligation — for invoicing and tax-related records.
Who we share data with
The only third parties involved are :
- Lemon Squeezy (Merchant of Record) — processes payments on our behalf and collects VAT. Lemon Squeezy LLC, USA. Their privacy policy.
- Brevo — handles transactional emails (magic links) and the newsletter, if you subscribed. Brevo SAS, France. Their privacy policy.
- OVH — hosts the servers in France. OVH SAS, France. Their privacy policy.
We do not sell, rent or trade your data. Ever.
How long we keep it
- Account data — kept as long as your account is active, plus 3 years after closure (legal requirement for billing records).
- Newsletter subscription — kept until you unsubscribe.
- Server logs — rotated after 30 days.
- Invoicing records — 10 years, as required by French tax law.
Your rights
Under GDPR, you have the right to :
- Access the data we have about you
- Rectify it if anything is wrong
- Erase it (right to be forgotten), subject to our legal retention obligations
- Portability — export your data in a machine-readable format
- Object to processing in some cases
- Withdraw consent at any time for anything based on consent (newsletter, optional features)
- Lodge a complaint with the CNIL (the French data protection authority) if you believe we mishandled your data
To exercise any of these rights, email hello@hey-metrics.com. We answer within 30 days, usually faster.
Cookies
We use one cookie : a session token that keeps you signed in after a magic link login. It's strictly necessary for the service to work, so no consent banner is required (Article 82 of the French Data Protection Act).
We do not use any tracking, analytics or advertising cookies.
International transfers
Most of your data stays in the EU (OVH France for hosting, Brevo France for emails). Lemon Squeezy is US-based, but they're a certified Merchant of Record handling EU customers under appropriate data transfer agreements (Standard Contractual Clauses).
Changes to this policy
If we update this policy, we'll post the new version here with an updated "Last updated" date. For substantial changes (new categories of data, new processors), we'll email registered users at least 30 days in advance.