Data Processing Addendum

What we process

Pragnametrics processes pseudonymous analytics events: pageview counts, referrer, country, and a device/UA category. We do not process cookies, persistent IDs, or personal data that identifies a visitor.

Subprocessors

• Google Cloud Platform — compute, Firestore, GCS
• OpenRouter — LLM inference (no data persistence)

Data residency

Analytics data is processed in asia-south1 (Mumbai).

Retention

• Events — 730 days (configurable via RETENTION_DAYS)
• Session-replay frames — 30 days (lifecycle rule)
• Audit log — indefinite

Privacy invariants

• No cookies
• No persistent IDs
• IP last octet zeroed
• User-agent classified, not stored
• Query strings stripped
• No fingerprinting

Data-subject rights

Visitors can request access or erasure of their data. From your dashboard's Compliance suite, submit a Data Subject Request (GDPR/CCPA); we acknowledge and respond within 30 (GDPR) / 45 (CCPA) days.