Cookie policy

Last updated: 10 October 2026

This policy covers our marketing website at stepmetrics.co. On your first visit, we ask before loading optional analytics. You can accept or reject analytics with one click and continue using the website either way. Scrolling, following a link or continuing to browse does not count as consent.

Change cookie settings at any time, or use “Cookie settings” in the footer of any page.

What happens before you choose

Our analytics tracker is not loaded, no analytics events are queued, and we do not create an analytics cookie or collect a device fingerprint. Without JavaScript, optional analytics also remains off. Requests needed to serve and protect the website still occur and can include your IP address and browser information.

Essential storage and contact-form protection

• stepmetrics:cookie-consent:v1 is a local-storage entry that records your analytics choice and its expiry time. We honor it for 180 days, then ask again. It does not contain a visitor identifier. Browser storage may retain the expired entry until you make a new choice or clear site data.
• theme is stored locally when you select a light or dark theme, including when your selected theme is passed from the dashboard. It remains until you change it or clear site data.
• Our contact form uses Cloudflare Turnstile to distinguish people from automated submissions. This protection runs independently of your optional analytics choice and processes browser and network information. See Cloudflare’s privacy policy.

What accepting analytics enables

“Accept analytics” enables StepMetrics analytics on this marketing website, including the following technologies for measuring visits, engagement, and returning browsers. The tracker sends data to our service at app.stepmetrics.co.

• stepmetrics_id: a first-party cookie containing a random browser identifier. It lasts up to 400 days after the most recent tracked visit, subject to shorter browser limits. It is scoped to this website’s host. The identifier is included in analytics requests so we can recognize returning browsers.
• Device fingerprinting: the tracker reads device characteristics such as screen size, time zone, languages, graphics information, fonts and a rendered-image hash to recognize likely returning devices. It does not need a cookie and can be an imperfect match. It is covered by the same optional analytics choice.
• Visit and event measurements: page paths and query strings, referrers, campaign information, clicks, engagement and performance measurements, together with IP addresses and browser information. Raw request telemetry is retained; this collection is not anonymous.

The 180-day consent choice and the cookie’s maximum lifetime are separate. An expired choice stops analytics until you accept again. For how collected data is used, shared and retained, read our privacy policy.

Rejecting analytics or changing your mind

“Reject analytics” keeps the tracker off and removes any existing stepmetrics_id cookie on this host. If you previously accepted, rejecting closes the tracker’s consent gate immediately and reloads the page to remove the running tracker. It stops future analytics events, including events normally sent when you leave the page. It cannot recall data already sent.

We remember your choice in this browser on this website. Clearing site data or switching browsers means you will be asked again. If your browser blocks storage, a choice can apply only to the current page; analytics defaults to off on the next page. Browser cookie controls are also available, but blocking the analytics cookie alone does not block fingerprinting: use “Reject analytics” to turn off both.

The dashboard and customer websites

The dashboard uses separate cookies for authentication and recognizing known sign-in devices, and storage for workspace and display preferences. Rejecting marketing analytics does not prevent sign-in. Customers who install our tracker on their own websites control their own notices and consent settings; this website’s choice does not apply to those sites. See our privacy policy and tracker installation guide for details.

For questions, use our contact form with “Privacy” in the subject.