GDPR compliance

Pathmetrics was built with privacy-first tracking in mind. We understand the importance of protecting your visitors’ personal data and staying fully compliant with data protection laws especially the General Data Protection Regulation (GDPR) in the EU.

Here’s how Pathmetrics ensures GDPR compliance from the moment you install it.

Consent-based tracking

Pathmetrics does not track any visitors unless they have given explicit consent for analytics cookies.

We integrate automatically with popular cookie banner solutions, and we wait for the user to accept cookies before collecting any data. Until that happens, tracking is completely disabled.

If you're using a custom or third-party cookie solution, you can manually trigger tracking with a simple call to:

window.pathmetrics.enableTracking();

This gives you full control over when tracking begins, ensuring that consent comes first.

What kind of data does Pathmetrics collect?

We collect only the data needed to help you understand conversion paths — nothing more.

Pathmetrics itself does not collect personally identifiable information (PII). Specifically:

  • No names

  • No email addresses

  • No IP addresses

  • No cookies that store personal details

Instead, Pathmetrics adds additional data on form conversions and storing the path to conversion in a cookie across sessions.

We only track:

  • Referring channels (e.g. Google Ads, Instagram)

  • Pages visited and time spent

  • Time between visits

  • Form submission as a conversion trigger

Data storage and security

All tracking data is stored locally within your WordPress database — it is not sent to third-party servers. You are always in control of the data. You can delete tracking records at any time from your WordPress admin panel. This keeps everything on your own infrastructure and avoids issues with cross-border data transfers.

What you need to include in your privacy policy

Even though Pathmetrics is GDPR-friendly by default, you should still mention it in your site's privacy policy. We recommend including:

  • That you're using a tool to track anonymous visitor journeys

  • That tracking only occurs after consent is given

  • That no personal data is stored or shared with third parties

Did this answer your question?
😞
😐
😁