Privacy notice · version 2026-10-08

What MetLex keeps about you, and why

Controller: Mettle AB, org. no. 559249-4842, Stockholm. Contact: privacy@metlex.eu.

MetLex returns passages of law. No generative model runs at MetLex. What is kept depends on how you use it.

Without an account

• Nothing you type is stored.
• Without an account each search waits seven seconds before the answer is shown. Against scripted use, searches are capped at six a minute per network address: a hashed form of the address is held in the memory of the server for that minute. The hash key changes every time the server restarts. Nothing is written to a log or a database. Legal basis: legitimate interest in keeping a free service available, GDPR Art. 6(1)(f).
• Your browser (localStorage) remembers the region you chose and which install tab you looked at, so the page opens as you left it. Neither is sent to us. Clearing site data removes them.

With an account

• Account data: email, name, organisation, account type, the terms version you accepted, your switch settings. There is no password. Basis: the contract with you, Art. 6(1)(b).
• Login code: to log in you ask for a one-time code, which we email to you. A hash of the code is kept for ten minutes or until used. Sending the mail goes through the email provider listed below; it sees your address and the code, nothing else.
• Key: only a hash and the first characters of your key are stored.
• Connected apps: when you let an app such as claude.ai sign in (OAuth), the app's name and hashed access tokens are stored against your account, for up to 90 days or until you remove the app on your account page. Basis: the contract, Art. 6(1)(b).
• Signing in with Microsoft or Google (optional): instead of the one-time password by email you can sign in with a Microsoft work or school account or a Google account. MetLex then receives from the provider your email address, your name and an identifier the provider keeps stable for you, and stores the identifier, the email address at the time of linking, and when the sign-in was linked and last used, only to recognise you when you sign in. MetLex receives no password and no access to your mailbox, files or contacts. Microsoft Ireland Operations Limited and Google Ireland Limited, whose parent companies are in the United States, are independent controllers of their own records of your sign-in, and their privacy statements apply to that part. You can remove a linked sign-in on your account page; the one-time password by email always remains. Basis: the contract, Art. 6(1)(b).
• Session: a cookie named mlx_s holds a random session token for 30 days. It is strictly necessary for login.
• Language and region: a cookie named mlx_lang remembers the language you chose with the switch, for one year. It is set only when you use the switch and holds nothing but the language code. It is strictly necessary for what you asked for, so no consent banner is shown.
• Search history (switch on your account page): your questions, region, the ids of the passages returned, and the time. On by default for Free accounts, off for Library accounts. Turning it off deletes it. Searches made by an AI through the tool (MCP) are never stored, whatever the switch. Basis: legitimate interest in letting you see and repeat your searches, Art. 6(1)(f), with the switch as your objection.
• Improving retrieval (separate switch): your questions, region and whether anything matched, stored without a link to your account. Used to find gaps in the corpus and in the search. On by default for Free accounts, off for Library accounts. Website searches only; never searches through the tool. Basis: legitimate interest, Art. 6(1)(f), with the switch as your objection.
• Email about changes (opt-in): your email, used only for that. Basis: consent, Art. 6(1)(a). You can withdraw that consent at any time with the switch on your account page; mail already sent is not affected.

Feedback

• A rating is stored against the response id. A comment is stored as written; do not include confidential details. If you ask for a reply, your name and email are stored with the comment until the reply is sent. Basis: legitimate interest in improving the service and in answering you, Art. 6(1)(f).
• Feedback works without an account. The response id is random and identifies the response, not you.
• Ordering Library: the order form stores the company's billing details and VAT number, the names and email addresses of the readers, and the contact person, as long as the subscription runs and seven years after for accounting law. The VAT number is checked against the EU VIES service. A confirmation is mailed to the contact. Basis: the contract, Art. 6(1)(b), and the legal obligation to keep accounting records, Art. 6(1)(c). The readers named in an order are not party to the contract: their names and email addresses are processed on the legitimate interest of the company and of Mettle in giving them the access ordered, Art. 6(1)(f).
• Asking for an adviser: the name, organisation, email and message you enter in the form are stored and mailed to the adviser, and kept until answered; then the contact details are removed. Basis: steps before a contract at your request, Art. 6(1)(b).

Always: request metadata

For every request: time, account or "anonymous", credential id, tool, status, latency, request id, the ids of the passages returned. Never the question. Used for limits, security, billing and to see which passages are served and which requests find nothing. Basis: legitimate interest, Art. 6(1)(f). Kept 13 months.

Where, and who else

• Servers in the European Union. The hosting provider is listed below as a sub-processor; it does not see question text, because none is stored except where you switched history or improvement on, and then only in the database on our server.
• Sub-processor: Scaleway SAS (France), hosting in Paris and every email MetLex sends. No AI provider: MetLex runs no model.
• Orders, advisory requests and feedback stay in the database on that server. Mettle AB is told by email only that one has arrived, with no names or contents, and reads it there.
• Please use the forms on this site to send us orders, requests and questions: what you write there is stored only in the database on our server in Paris. Mail you send directly to an @metlex.eu or @mettle.se address is received in Google Workspace (Google Ireland Ltd), where Google processes it for us. Our Workspace plan does not let us fix where it is stored, so Google may store and process it outside the EU/EEA, under the EU Commission adequacy decision for the United States and standard contractual clauses.
• For a Library order, the invoice is made in Fortnox (Fortnox AB, Sweden) with the company, invoice address, reference and amount; accounting records are kept in Sweden for seven years.
• No transfer outside the EU/EEA, except for mail you send us directly, as above.

How long

• The per-minute counter for searches without an account: one minute, in memory. Login codes: ten minutes; a count of codes per address: until the end of the day.
• Account data, history, keys: until you delete the account, or after 24 months without login.
• Feedback with a reply request: until answered, then the contact details are removed.
• Request metadata, and questions kept to improve retrieval: 13 months.

Required, and automated decisions

You need to give personal data only to create an account or to place an order; without it neither can be done. Everything else is optional. MetLex makes no automated decisions about you, and no profiling.

Your rights

Access, rectification, erasure, restriction, portability and objection, Art. 15 to 21. Most of this you can do yourself on the account page: see and clear history, change switches, make a new key, export, delete the account. For the rest, write to the contact address. You can complain to Integritetsskyddsmyndigheten (IMY).