Privacy Policy.

Who we are

MetricBase is a data-first content brand publishing analysis and education across three editorial verticals: energy markets, cryptocurrency and blockchain, and Indonesian equities. The portal at metricbase.org is the root property; editorial content is published across the subdomains listed below.

For the purposes of this Privacy Policy, "MetricBase," "we," "us," and "our" refer to the operator of metricbase.org and its subdomains, acting as the data controller for personal information collected through these properties. To exercise any rights described in Section 9, contact us using the methods in Section 13.

This policy applies to all of the following properties:

• metricbase.org — the content portal and root domain
• energy.metricbase.org — Energy Markets vertical
• chain.metricbase.org — Crypto & Technology vertical
• saham.metricbase.org — Pasar Saham Indonesia vertical
• subs.metricbase.org — newsletter subscription
• og.metricbase.org — utility tools

Information we collect

2.1 — Information you provide directly

We collect information you choose to provide, including:

• Your email address when you subscribe to the MetricBase newsletter
• Your name and email address when you submit the contact form
• Comments or content you submit on articles where commenting is enabled
• Any other information you voluntarily include in correspondence with us

2.2 — Information collected automatically

When you visit any of our properties, our hosting infrastructure and analytics tools automatically collect:

• IP address (often partially anonymized by analytics processors)
• Browser type, version, and language settings
• Operating system and device type
• Referring URL (the page you came from)
• Pages visited, time spent, and navigation paths within the site
• Approximate geographic location at the country or region level, derived from IP address

2.3 — Information from cookies and similar technologies

See Section 4 for a full description of cookie and tracking technology use.

How we use information

We process personal information for the following purposes, each under a corresponding lawful basis (consent, contractual necessity, or legitimate interest, as applicable):

• Delivering the newsletter you subscribed to
• Responding to contact form inquiries and other correspondence
• Operating, maintaining, securing, and improving our properties
• Analyzing aggregate site traffic and content performance to inform editorial decisions
• Detecting and preventing fraud, abuse, security incidents, and technical malfunctions
• Complying with legal obligations under Indonesian and applicable foreign law
• Serving, measuring, and reporting on advertisements when Google AdSense or comparable advertising services are active

We do not sell personal information to third parties. We do not conduct cross-context behavioral advertising of our own; third-party advertising networks that may serve ads on our properties operate under their own published privacy practices.

Cookies & tracking technologies

Our properties use cookies and similar technologies (web beacons, local storage, pixel tags). By using the site and accepting the cookie consent banner, you consent to these uses as described below.

4.1 — Essential cookies

Required for core site functionality, including remembering your cookie consent state, securing form submissions against cross-site request forgery, and maintaining basic session continuity. These cookies do not require consent under most regulatory frameworks but are documented here for transparency.

4.2 — Analytics cookies

We use Google Analytics to understand how visitors engage with our content. Google Analytics may set cookies including _ga and _gid. Data is processed by Google LLC under its published terms. For Google's privacy disclosures, see policies.google.com/privacy.

4.3 — Advertising cookies

When Google AdSense or comparable advertising networks are active on our properties, Google and its advertising partners may place cookies to serve, target, and measure advertisements. You can opt out of personalized advertising:

• Through Google's Ads Settings at google.com/settings/ads
• Through the Digital Advertising Alliance at aboutads.info/choices
• Through the Network Advertising Initiative at optout.networkadvertising.org

Third-party services

We rely on the following third-party processors and service providers. Each operates under its own privacy practices, and we have selected them based on stated compliance and security commitments.

We require these processors to maintain appropriate security and to process data only for the purposes we have engaged them for. We do not authorize them to use your personal information for their own marketing purposes.

Sharing & disclosure

We share personal information only in the following limited circumstances:

• Service providers as listed in Section 5, operating under our instructions
• Legal requirements — when required by law, court order, regulatory request, or governmental authority
• Rights and safety — to protect our rights, property, or safety, or that of users or others
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, with reasonable notice to affected users
• With your consent — for any other disclosure not covered above

We do not sell personal information.

Data retention

We retain personal information only as long as necessary for the purposes described in this policy or as required by applicable law:

• Newsletter subscribers — until you unsubscribe, plus up to 30 days to process the unsubscribe
• Contact form submissions — up to 24 months after the inquiry is resolved
• Analytics data — per Google Analytics defaults, typically 14 months for user-level data
• Server access logs — typically 30 to 90 days, depending on provider
• Cookie consent records — 12 months from grant of consent, after which we re-prompt

Where law requires longer retention (tax records, regulatory obligations), we retain only what is required, for only as long as required.

International data transfers

MetricBase is operated from the Republic of Indonesia. Several of our processors — most notably Google — transfer and process data in other jurisdictions, including the United States and the European Union.

Where these transfers occur, we rely on the safeguards published by the respective processors, including Standard Contractual Clauses, Data Privacy Framework participation where applicable, or equivalent transfer mechanisms recognized under the destination jurisdiction's law.

Your rights

Depending on your jurisdiction, you may have the following rights with respect to your personal information. Indonesian residents have rights under UU 27/2022 (Personal Data Protection Law / UU PDP). Residents of the European Union and United Kingdom have rights under GDPR / UK GDPR. California residents have rights under CCPA / CPRA. Other jurisdictions may grant similar rights.

These rights typically include:

• The right to access information we hold about you
• The right to correct inaccurate or incomplete information
• The right to delete your information, subject to legal limitations
• The right to restrict or object to certain processing
• The right to data portability in a structured, machine-readable format
• The right to withdraw consent at any time where processing is based on consent
• The right not to be subject to fully automated decisions with significant effect
• The right to lodge a complaint with the supervisory authority in your jurisdiction

To exercise any right, contact us using the methods in Section 13. We will respond within 30 days, though complex requests may require additional time, in which case we will advise you accordingly.

Children's privacy

Our properties are intended for adult users with an interest in financial markets and related topics. We do not knowingly collect personal information from anyone under 16 years of age. If you believe we have inadvertently collected information from a minor, please contact us using the methods in Section 13 and we will delete it promptly.

Security

We implement reasonable technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include TLS encryption in transit, access controls, audit logging, and processor due diligence.

No system is fully impervious. We cannot guarantee absolute security, but we maintain practices appropriate to the sensitivity of the data we process and the risk profile of the activities we operate.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated by:

• Posting the revised policy at this URL with a new "Last updated" date
• Where appropriate, sending direct notification to active newsletter subscribers
• For changes that materially affect consent, re-prompting consent through the cookie banner

Continued use of our properties after changes take effect constitutes acceptance of the updated policy.

Contact us

If we are unable to resolve your concern, you may also contact the Indonesian Ministry of Communication and Information Technology (Kominfo) or the supervisory authority in your jurisdiction.