Les articles d'aide existent en allemand et en anglais. Vous les lisez ici en anglais.
Protection des données et sécurité
Where is the data processed?
Application, database and analytics storage are planned for the europe-west3 region (Frankfurt); what goes beyond that, such as logs and support access at the cloud provider, is listed in the sub-processor list under “Documents”. You conclude the data processing agreement with us in the portal under “Privacy” or in the Shopify app; nothing is measured before that. We have our own agreements with our sub-processors.
Is there a data processing agreement, and where are the servers?
| Topic | Status |
|---|---|
| Application region | europe-west3 (Frankfurt), planned |
| Analytics storage location | europe-west3 (Frankfurt), planned |
| Sub-processors with a US parent | disclosed under Documents, with the legal basis per entry |
| Language model region for the chat | shown in the portal; europe-west3 (Frankfurt) by default |
| Data processing agreement with you | concluded in the portal under “Privacy” |
The main resources are in Frankfurt. That does not mean all processing stays in the EU: the cloud provider keeps some logs globally, group and support access from outside the EEA is possible, and not every sub-processor has its parent company in the EU. Who that is, and on what legal basis they act, is set out in the sub-processor list under “Documents”, entry by entry rather than as an assurance in one sentence.
Legal note
The contracts with the sub-processors are concluded; who they are is listed in the annex under “Documents”. A data protection impact assessment for the measurement on your website, for post-view in particular, is your responsibility as the controller; we support you in it as the data processing agreement provides.
Dernière vérification le 13 oct. 2026
Également demandé
- DPA
- Where are the servers?
- Data processing in Europe
- Sub-processors
- Is there a transfer to the USA?
- Sub-processor with a US parent
- Third-country transfer
Articles connexes
- How do I conclude the data processing agreement?
How do I conclude the DPA with Metrunio, and why is nothing measured before?
For every account, measurement starts only once the data processing agreement (DPA) is concluded; until then Metrunio accepts nothing and stores nothing. You conclude it in the portal under “Privacy” or in the setup step “Conclude the DPA”, and for a Shopify store also right in the app: enter the company, its address and the person concluding it, confirm they are authorised, done. Data arrives a few seconds later, without any change to your installation.
- How long is data retained?
Which retention periods apply and can I change them?
Raw events are retained for 180 days by default, 90 days on the free Start plan; the period is configurable per tenant up to the plan’s limit and enforced automatically. Journeys, touchpoints and conversions share the period of the raw events they were derived from and are deleted with them, or earlier if a deletion is requested. If a change of plan lowers the limit below the configured period, we announce the reduction 30 days in advance.
- What security properties does Metrunio have?
How is separation between customers enforced?
Tenant separation is enforced in the database as well (row-level security), not only in application code. Tracking elements are signed, there is no open redirect, and signed requests are protected against replay.
- Do I need a cookie banner for Metrunio?
Do I need consent and an entry in the cookie banner for Metrunio?
Yes: Metrunio measures visits and ad contacts only with consent, so it belongs in your cookie banner and your privacy policy together with its storage entries. Without consent it accepts at most purchases and refunds for revenue reconciliation, without browser, customer or advertising identifiers. The legal framework is Section 25 TDDDG: storing and reading information on a device generally requires consent.