dayzmetrics · privacy

Privacy

What we collect, why, where it lives, and how long we keep it. In plain language.

Last updated: 16 June 2026

The short version

We collect as little as we can to run an honest server tracker. No ads, no data brokers, and we never sell your data. Cookieless, anonymous counting runs by default; cookie-based analytics (Google Analytics) load only if you accept them in the cookie banner. We never store your raw IP, and you can see or delete your data any time using the rights below.

Who is responsible for your data

dayzmetrics is operated by Dreadpoints OÜ (registry code 17476161), Aida tn 7, Pärnu linn, Pärnu maakond 80010, Estonia (the “controller”). For any privacy question, or to exercise your rights, email support@dayzmetrics.com.

What we collect, and what we do not

Side by side so there is no ambiguity.

We collect

Minimal data

  • Cookieless visit counts via two ids stored in your own browser (not cookies)
  • Coarse device class, browser family, OS family, screen-size bucket
  • Which server you opened, favourited or shared (no identity attached)
  • If you create an account: your email address and a hashed password (never the password itself), or your linked Discord profile if you sign in with Discord — plus the display name, handle, avatar, favourites, server ratings, referrals and achievements tied to your account
  • Server reports you submit, with a salted IP hash for rate-limiting
  • Contact-form messages: your email, subject and message
  • Google Analytics data (cookies + usage) — only if you accept analytics cookies
  • For the Discord bot: your Discord user id and the watchlist, alerts and timezone you set
We do not

Things we never do

  • Store your raw IP address in our database
  • Sell or “share” your personal data (as California law defines those)
  • Run advertising trackers or buy data from brokers
  • Store card or payment details — premium is billed entirely by Discord
  • Set tracking cookies before you consent

How each piece works

Tap any item to expand.

First-party, cookieless analytics

We count page views and visits using two ids that live only in your browser: a per-tab id in sessionStorage and a persistent anonymous id in localStorage. Neither is a cookie, neither is shared, and you can clear both at any time. We derive a coarse device / browser / OS class from your User-Agent to fix layout issues. Your IP address is not stored.

Google Analytics (only with your consent)

If you accept analytics in our cookie banner, we load Google Analytics 4 (provided by Google) to understand aggregate usage. It sets its own cookies and processes usage data, with IP anonymisation enabled. If you decline, GA4 is never loaded. You can change your choice any time via the banner or by clearing cookies. Google acts as our processor.

Your account (optional)

You can browse everything without an account. If you create one, we store your email and a securely hashed password (we can never see your actual password), or the basic profile from the Discord account you sign in with. Your favourites, server ratings, referrals and achievements are then saved to your account so they sync across devices. We send a verification email when you sign up, and account or password emails when you ask for them. You can edit your profile, export or delete your data, or delete your whole account at any time from your settings. Deleting your account removes your personal data from our database.

Server reports

When you report a server we store your reason and note, plus a one-way, salted hash of your IP for rate-limiting and de-duplication. The raw IP is never persisted and the hash cannot be reversed back to your address.

Contact form

If you message us through the contact form we store your email address, subject and message so we can reply and keep a record, plus a salted IP hash and coarse country for spam control. We use it only to handle your enquiry.

Discord bot

If you use our Discord bot we store your Discord user id and the data you create with it — your watchlist, alert settings and preferred timezone — so the features work across sessions. A server’s panel and branding settings are stored per Discord server. Premium is purchased and billed entirely through Discord; we never see or store your payment details. You can remove your data any time with the bot’s own commands or by emailing us.

Local browser storage

Your favourites and timezone preference live only in your browser’s localStorage. We never receive them. Clear your browser data and they are gone.

Server logs

Our web server and hosting provider process IP addresses transiently to deliver pages and block abuse, under their own policies. No raw IPs are written into our application database.

Why we may process it (GDPR legal bases)

For visitors in the EU/EEA and UK.

Cookieless analytics, security, running the trackerLegitimate interests — Art. 6(1)(f)
Google Analytics cookiesYour consent — Art. 6(1)(a)
Replying to your messagesLegitimate interests / your request
Creating and running your accountPerformance of a contract — Art. 6(1)(b)
Product & news emails (only if you opt in)Your consent — Art. 6(1)(a)
Discord bot features & premiumPerformance of a contract — Art. 6(1)(b)

Data retention

Everything has a clock on it.

First-party analytics records90 days
Google AnalyticsPer Google settings (default up to 14 months)
Server reportsWhile relevant to moderation
Contact messagesUp to 24 months
Account dataUntil you delete your account
Login sessionsUp to 30 days, or until you log out
Email verify / reset linksA few hours, then they expire
Discord bot dataUntil you remove it / stop using the bot
Local browser storageUntil you clear it
Session cookie30 days when signed in; admin login 7 days

Cookies

The site sets no tracking cookies unless you accept analytics in the cookie banner, in which case Google Analytics sets its cookies. If you sign in, we set one strictly-necessary session cookie to keep you logged in — it is not used for tracking and is required for the account to work. A separate session cookie is used for the private admin dashboard. You can withdraw analytics consent at any time via the banner or by clearing cookies.

Who we share data with (sub-processors)

A small set of providers help run the service. We do not sell your data.

Hosting

Hostinger

Serves the site and database; processes connection data (incl. IP) transiently to deliver pages and block abuse.

Analytics

Google (Analytics 4)

Aggregate usage analytics, loaded only with your consent. May process data outside the EU under appropriate safeguards.

Email

Resend

Sends our account emails (verification and password-reset links, and product/news emails if you opt in). Receives the email address a message is sent to.

Sign-in

Discord

If you choose to sign in with Discord, it confirms your identity and shares a basic profile (id, name, avatar, email). Used only to create and access your account.

Bot & billing

Discord

Hosts the platform our bot runs on and handles all premium billing. Your use of Discord is governed by Discord’s own policies.

Data source

Valve / Steam

Public DayZ server and Workshop data we read to build the tracker — server data, not your personal data.

International transfers

Some providers (e.g. Google, Discord) may process data outside the EU/EEA, including in the United States. Where that happens, transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses.

Your rights (EU/EEA & UK)

If you are in the EU/EEA or UK you can ask us to:

Email support@dayzmetrics.com and we will respond within one month. You also have the right to complain to a supervisory authority — in Estonia, the Data Protection Inspectorate (AKI), or your local authority in the EU/UK.

California privacy rights (CCPA/CPRA)

If you are a California resident you have the right to know what personal information we collect, to access, delete and correct it, and not to be discriminated against for exercising these rights. We do not sell or share your personal information as those terms are defined under California law, and have not done so. To make a request, email support@dayzmetrics.com.

Children

dayzmetrics is not directed to anyone under 16, and we do not knowingly collect data from children under 16. If you believe a child has provided us data, contact us and we will delete it.

Changes

We may update this policy. Material changes will be reflected by the “last updated” date at the top of this page.

Contact

Dreadpoints OÜ (registry code 17476161), Aida tn 7, Pärnu linn, Pärnu maakond 80010, Estonia. Email support@dayzmetrics.com.