Blog
What we keep, and for how long
A plain-language tour of our retention periods, and why access logs are the shortest.
Retention is the part of a privacy policy people skim, so here it is in one place.
Server access logs, which include the visitor IP address, are kept for 14 days for security and abuse prevention, then deleted. Measurement data does not contain the IP address: it is used for a country lookup and discarded.
Measurement data is kept for the period each customer configures per site, between 6 and 24 months depending on the plan. Enterprise customers can set their own. When the period ends the data is deleted, and customers can also ask for deletion at any time; we complete those requests within 30 days.
Account and invoicing records are kept for 6 years, which UK tax law requires. Data stays in the region chosen by the customer, London or Frankfurt. The full details are on the privacy page and in our DPA summary.