Privacy Policy

Last updated: March 2026

1. What We Collect

StatFast is designed to be privacy-friendly from the ground up. Our tracking script collects only aggregate analytics data and does not collect any personally identifiable information (PII). Specifically, we collect: page URLs visited, referrer domains (not full URLs), device type (mobile, tablet, or desktop), browser name, operating system, country (derived from IP address), and a non-reversible session identifier. We do not store raw IP addresses in our database, nor do we record names, email addresses, or any other personal data about your website visitors.

2. How We Use Data

The analytics data we collect is used solely to provide you with website traffic insights through your StatFast dashboard. This includes generating visitor counts, pageview statistics, traffic source breakdowns, geographic distributions, and AI-powered insights. We do not sell, rent, or share your analytics data with any third parties for advertising or marketing purposes. Aggregate, anonymized data may be used to improve the StatFast service.

3. Cookie Policy

StatFast does not use cookies. Our tracking script operates entirely without cookies, local storage, or any other client-side persistence mechanisms. This means your website visitors are never tracked across sessions or across different websites, and you do not need to display a cookie consent banner for StatFast analytics.

4. Third-Party Services

We use the following third-party services to operate StatFast:

DodoPayments -- for processing subscription payments. DodoPayments handles payment data in accordance with PCI DSS standards. We do not store your credit card information.
Resend -- for sending transactional emails such as email verification and password reset links.
OpenAI -- for generating AI-powered insights on your dashboard. Only aggregate analytics data (no PII) is sent to OpenAI for analysis.

5. Data Retention

Data retention depends on your plan. Free accounts retain analytics data for 6 months. Pro accounts have unlimited data retention. When data exceeds the retention period, it is permanently deleted from our systems. If you delete your account, all associated analytics data is permanently removed within 30 days.

6. User Rights

You have the right to:

Access -- view and access all analytics data associated with your account at any time through your dashboard.
Delete -- request deletion of your account and all associated data by contacting us or using the account settings page.
Export -- export your analytics data in standard formats for portability.

7. Children's Privacy

StatFast is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will promptly delete such information.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email at least 30 days before they take effect. The "Last updated" date at the top of this page indicates when the policy was last revised.

9. Contact

If you have questions about this Privacy Policy or how we handle data, please contact us at hello@statfa.st.