Privacy policy

Draft. The controller's details marked [TO COMPLETE] must be filled in before publishing.

This policy covers two groups of people: visitors to websites that use Statsdot, and Statsdot customers.

Who is responsible

[TO COMPLETE: legal name, tax ID, postal address and contact email of the owner of Statsdot.]

Visitors to websites that use Statsdot

The owner of each website decides to use Statsdot and is the controller of its statistics; Statsdot processes them on the owner's behalf.

What is processed. When a page loads, the Statsdot script sends the page address without query parameters, the domain of the referring website, UTM campaign tags, the screen width and, for events, the event name and an optional label such as the address of an outbound link. The server also receives the IP address and browser string, as every web server does.

What is stored. The page, referring domain, campaign tags, event name and label, country, device type, browser, operating system, time, and a visitor code calculated from the IP address, the browser and a random key that is deleted every day. The IP address and the full browser string are not stored. Nothing is stored on the visitor's device: Statsdot sets no cookies and uses no local storage.

Why. To give the website owner aggregated statistics about the use of their site.

How long. As long as the website owner's plan keeps data: 6 months on the Free plan, while the subscription lasts on paid plans, and until the owner deletes the site.

Sharing. The statistics are never sold, shared with third parties or used for advertising, profiling or any purpose other than the owner's own statistics.

Customers

Account data. Name, email address, password (stored as a hash), language and the websites you add, to provide the service.

Payments. Payments are processed by Stripe. We receive the plan, the payment status, the billing country and, if you provide it, your VAT number. We never see or store your card details.

Emails. Account emails (password reset, usage warnings, weekly reports you turn on) are sent through [TO COMPLETE: email provider].

Legal basis. The contract with you, and our legal obligations for invoices.

How long. While your account exists; invoices for as long as tax law requires.

Processors

• Hosting: [TO COMPLETE: hosting provider and location, European Union].
• Payments: Stripe.
• Email: [TO COMPLETE].
• Network and security: [TO COMPLETE: e.g. Cloudflare, if used].

Our own website

statsdot.com measures its visitors with Statsdot itself, as described above. The public pages set no cookies. Signing in sets a session cookie that is strictly necessary for the account.

Your rights

You can ask for access, correction, deletion, restriction, portability or objection by writing to [TO COMPLETE: contact email]. Visitors of a website that uses Statsdot should contact the owner of that website; the data we keep about them cannot be linked to a person. You can complain to your data protection authority.