Security and privacy

Povezuješ prave naloge. Evo kako se brine o njima.

Your provider accounts

• Read only. Metribay samo read — never post/edit/delete. Read-only gde provajder nudi — integration guides.
• Least access. Samo praćeni resursi.
• Encrypted at rest. Keys, tokens, passwords, service account keys.
• Never shown again. Ne u app, errors, logs, exports. Ni owners.
• Workspace-bound. Sopstveni workspace; Cloud owners samo add/change.
• Public HTTPS only. Bez redirect follow drugde.
• Your access. Cloud čita samo preko tvojih naloga, nikad shared Metribay nalog.

Revoke bilo kad kod provajdera: ukloni service account, obriši token, regeneriši key.

Your Metribay account

• Dvofaktorska autentifikacija — Profile and security.
• Roles — Team members and roles.
• Private sign-up/recovery — nikad ne otkriva da li email ima nalog.

Where your data lives

Metribay Cloud: Hetzner Finland, EU. Cloudflare ispred + emailovi. Paddle plaćanja.

Noćni DB backup; Hetzner dnevni server backup.

Self-hosted: tvoj server, samo provajderi koje povežeš.

What Metribay stores

• name, email, password (hashed),
• workspaces, projects, data sources, events, team,
• encrypted provider credentials,
• daily metrics from providers.

Dnevni totali (visitors, clicks) — ne podaci o pojedinačnim posetiocima sajtova.

Detalji: privacy policy.

Deleting your data

• Stop collecting: pause data source ili archive project. Istorija ostaje.
• Revoke access: ukloni kod provajdera → Needs attention, istorija ostaje.
• Delete account: [email protected] sa emaila naloga, 30 dana. Backup-i rotiraju 14 dana. Billing po poreskom zakonu.

Zahtevi za kopiju, ispravku, ograničenje — odgovor u mesec dana.

Reporting a security issue

Ranjivost: [email protected] sa detaljima pre javnog objavljivanja.