---
slug: was-wird-gespeichert
title: "Which data is stored?"
category: datenschutz
locale: en
updated: 2026-10-13
keywords: ["stored data","personal data","PII","data minimisation","GDPR","cookie","localStorage"]
questions: ["What exactly does Metrunio hold about my website’s visitors?","Which personal data?","Do you store IP addresses?","What is in the database?","Do you store rejected events?","Which cookies does Metrunio set?","What is stored in localStorage?","What do I have to state about Metrunio in the cookie banner?"]
url: https://bench.metrunio.com/en/help/was-wird-gespeichert
---

# Which data is stored?

**What exactly does Metrunio hold about my website’s visitors?**

Pseudonymous identifiers, event data with timestamps, campaign and click identifiers, and conversion values. No raw IP addresses; event fields are not meant to hold plain-text names or contact details. Detected email addresses and phone numbers cause rejection; the automatic check does not detect every kind of personal data, though.

| Category | Implementation |
| --- | --- |
| IP addresses | not stored, neither raw nor as a checksum; processed only in transit and for rate limiting |
| User identifiers | user_id and user_id_hash are pseudonymised on receipt through a tenant-specific HMAC, including the SHA-256 of the email address from the Shopify app and the Shopware plugin |
| Plaintext PII | email addresses and phone numbers cause rejection (PII_DETECTED); we only store which field was affected, never the value |
| Metadata | at most 50 fields, 8 KB; HTML and executable content are rejected |
| Answers to the post-purchase question | only with consent to analytics; a key from a fixed list with the order number, linked to the order and journey, so not an anonymous survey |
| Fingerprinting | not implemented and not planned |
| Linking across websites | no linking across tenant boundaries. Within your tenant, Metrunio links contacts across websites as far as the consents and your instruction cover it: for example an ad seen on another site with the later visit to your shop (post-view), or visits to several of your websites through the same customer number |

## In the browser

| Name | Where | What for | Needs |
| --- | --- | --- | --- |
| metrunio_anonymous_id | localStorage | visitor identifier | consent to analytics |
| metrunio_session | sessionStorage | the session, its origin and the lead ID of a form | consent to analytics |
| metrunio_queue | localStorage | events that have not arrived yet | a decision in the banner |
| metrunio_consent_pending | localStorage | a decision whose report has not arrived yet | a decision in the banner |
| metrunio_view | cookie of the measurement address, 30 days | view identifier for post-view | consent to marketing |
| metrunio_aid | cookie on your domain, 13 months (seven days in Safari), only through your own measurement domain | the same visitor identifier on all subdomains of your domain, even after the site’s storage was cleared | consent to analytics |

Before a decision in the banner, the SDK reads and writes none of these. Withdrawing consent removes the identifier, session and queue, and the collector deletes the cookie whose consent has gone. Safari shortens metrunio_aid to seven days.

Name the cookies and storage entries in your consent management and your privacy notice, with purpose and duration, before anyone decides. For metrunio_aid that includes its reach: it applies on all subdomains of your domain.

The underlying principle is simple: what is not collected cannot be lost, passed on or misused. That is why the limits are drawn technically rather than merely promised contractually.

> **Legal note:** Which legal basis applies to which signal and purpose is for you as the controller to decide and to document with your data protection adviser.

## Also asked

- Which personal data?
- Do you store IP addresses?
- What is in the database?
- Do you store rejected events?
- Which cookies does Metrunio set?
- What is stored in localStorage?
- What do I have to state about Metrunio in the cookie banner?

## Related

- https://bench.metrunio.com/en/help/keine-ip-adressen
- https://bench.metrunio.com/en/help/welche-kennungen
- https://bench.metrunio.com/en/help/aufbewahrung
- https://bench.metrunio.com/en/help/eigene-messdomaene