Legal
Privacy Policy
Effective July 30, 2026
Metrics is a personal tracking application for recording numeric measurements and repeatable events. This policy explains what information Metrics processes, why it is used, and the choices available to you.
01 Information we process
Account information
If you sign in with email and password, your email address and authentication information are processed by Supabase. Metrics does not receive or store your readable password.
If you sign in with Google, Metrics receives only the basic identity information needed to create and authenticate your account: your Google account identifier, email address, name, and profile image when available. Metrics does not request access to Gmail, Google Drive, Calendar, Contacts, or your Google password.
Your Metrics content
We process the information you choose to record, including metric names, metric type, units, chart colors, privacy settings, numeric measurements, event timestamps, and related creation or update timestamps.
Device and service information
Metrics stores limited settings in your browser, such as your session, theme, chart range, chart mode, catalog sorting preference, and a verifier used for private metrics. Your raw privacy code is not stored. Hosting and authentication providers may process IP addresses, browser or device information, and request logs to operate and secure their services.
02 How we use information
We use information only as needed to:
- authenticate you and maintain your account;
- save, synchronize, and display your metrics and charts;
- remember the settings you choose;
- operate, secure, troubleshoot, and improve the service; and
- comply with legal obligations.
Metrics does not sell personal information, serve targeted advertising, or use your metric data to train artificial intelligence models.
03 Google user data
Google sign-in is used only to identify you and provide access to your Metrics account.
Metrics requests the openid, email, and profile
scopes. These scopes are classified by Google as non-sensitive.
Metrics' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
04 Service providers and disclosure
Metrics relies on a small number of service providers:
- Supabase provides authentication, database storage, and account deletion;
- Netlify hosts and delivers the application; and
- Google provides sign-in when you choose that option.
These providers process information only as needed to deliver their services and under their own terms and privacy policies. We may also disclose information if required by law, to protect the service or its users, or in connection with a business transfer. We do not sell your information.
05 Security
Metrics uses encrypted connections, authenticated access, and database row-level security designed to keep each user's records separate. No internet service can guarantee absolute security, but we limit the data collected and the systems that can access it.
06 Retention and deletion
Account information and Metrics content are kept while your account is active. You can permanently delete your account, metrics, and entries from Account by choosing Delete account. Service providers may retain limited security, backup, or legal records for their standard retention periods.
Browser settings may remain on your device after account deletion until you clear this site's browser data. If you used Google sign-in, you can also revoke Metrics access from your Google Account permissions.
07 Your choices
You can edit or delete individual metric entries in the application, delete your account, revoke Google sign-in access, and clear locally stored settings through your browser. You may also stop using Metrics at any time.
08 International processing
Service providers may process information in countries other than the one where you live. Where required, they use legal safeguards for international data transfers.
09 Children
Metrics is not directed to children under 13 or the minimum age required to consent to online services in their country. We do not knowingly collect personal information from children below that age.
10 Changes and contact
We may update this policy when the service or legal requirements change. The effective date above will be updated when changes are published.
For privacy questions or requests, email [email protected].