Where is my data stored?

In the United States.

Feasible is run by Cloudmanic Labs, LLC - 901 Brutscher Street, D112, Newberg, OR 97132 - and the hosted service runs on US infrastructure under Oregon law. There’s no EU region and we’re not going to imply there is. Some vendors in this category offer one; we don’t, today.

If your visitors are in the EU or the UK, that’s an international transfer, and it’s covered the ordinary way: the data processing addendum incorporates the EU Standard Contractual Clauses (module two, controller to processor) and the UK Addendum. It’s already part of the terms - nothing to sign.

What’s transferred is worth putting next to that. There’s no IP address in it, because the raw address never reaches disk. What crosses is a path, a referrer, a coarse location, a device string and a hash that expires nightly. That’s a materially smaller transfer than a tool that ships identified user records, though it’s still a transfer and we’re not going to argue otherwise.

Two more things:

• Each account gets its own database file. Your data isn’t sitting in a shared table with everyone else’s, which makes both export and deletion a whole-file operation rather than a careful DELETE.
• Retention is 5 years, and export works in every account state - including a locked or lapsed one, on purpose, because portability shouldn’t depend on a payment.

If US hosting is a hard no for you, that’s a legitimate reason to run it yourself on a machine in whatever country you like. It’s the same software, free, with every feature.