Semust Metrik
Privacy
Cookieless mode, Do Not Track, what is stored, and GDPR compliance.
Metrik does not fingerprint devices to recognise visitors, and it does not store IP addresses. In cookieless mode no persistent identifier is written at all.
Product page: Semust Metrik.
How a visitor is recognised
In the default mode, a randomly generated id is stored in the browser. It is not derived from the device, it is specific to your site, and it cannot be used on any other site.
No device fingerprinting
Techniques such as canvas, WebGL, installed-font enumeration, hardware details and plugin lists are not used. They were removed entirely in version 1.10.
Cookieless mode
<script src="https://unpkg.com/semust-js@latest/dist/semust-js.min.js"
data-token="mk_your-key-here"
data-cookieless="1"></script>Cookieless is not the default
Metrik uses cookies by default. You must turn cookieless mode on explicitly, and the
value has to be exactly "1".
In cookieless mode:
| Item | Behaviour |
|---|---|
| Cookies | None written |
| Persistent browser storage | Not used |
| Visitor id | Regenerated every day |
| Returning visitor | Counted as a new visitor the next day |
This makes tracking a person across days impossible. In exchange, your unique-visitor count runs somewhat high, because people returning on several days are counted more than once.
Do Not Track and Global Privacy Control
If a visitor's browser has Do Not Track or Global Privacy Control enabled, Metrik collects nothing at all. It does not fall back to cookieless mode — it does not run and sends no requests.
What is stored
| Data | Stored? |
|---|---|
| IP address | No — used momentarily only to derive country and city |
| Name, email | Only if you send them via identify() |
| Form contents | No |
| Page addresses | Yes |
| Device and browser details | Yes |
| Country, region, city | Yes |
Password-like and key-like query parameter values are stripped from addresses before they are stored.
Data retention
Collected events are kept for 2 years and deleted automatically afterwards.
Deleting a project permanently deletes all of its data.
GDPR
Because cookieless mode writes no persistent identifier, it often removes the need for cookie consent. The default mode does use cookies, so it needs to be covered in your cookie policy.
Not legal advice
This page describes how Metrik behaves technically. Which consents your site needs depends on the other tools you run and the country you operate in — check with your legal advisor.