What Pixel Relay stores, and for how long

Pixel Relay stores only what it needs to show your analytics and explain failed deliveries, and only after the clean-up described in What the relay removes.

The event log#

One row per event, kept for 90 days and then deleted automatically every night:

• the cleaned page address, exactly as sent to Meta
• the site event name and the Meta event it was sent as
• the referring site's host only, like google.com, never the full address
• your site's own host, for the per-domain split in analytics
• a keyed hash of the visitor's IP address, to count unique visitors; it cannot be turned back into the address
• the browser's user agent, for the devices and browsers chart
• whether customer details were attached (yes or no, never the details)
• the cleaned event details and Meta's answer, including its error message if it refused the event

Daily statistics#

Counts per website, day and Meta event: how many were received, delivered and failed. They contain nothing about any visitor and are kept for as long as the website exists, so long-term charts keep working after the event log is cleared.

Never stored#

• raw IP addresses
• full page addresses with query strings
• full referrer addresses
• email addresses, phone numbers, names or their hashes from events

Short links#

Clicks on short links are logged with a keyed hash of the IP address, the browser and the referring host, and deleted after 90 days like the event log.

Our full policies are on the privacy policy and the data processing addendum.