Privacy policy

Who we are

quietstats (“we”). Controller details and a contact address will be added before launch.

Visitors to websites that use quietstats

We act as a processor for our customers. We collect the page URL path, referrer domain, screen size, country (from our hosting provider’s header), device, browser and OS family, and UTM parameters. We use the IP address and user agent only in memory to compute a daily-rotating one-way hash and the device/browser/OS family; we do not store them. We set no cookies and store nothing on visitors’ devices.

Our customers

If you create an account we store your email address, a salted PBKDF2 hash of your password, your plan and Stripe customer and subscription IDs. We use one strictly necessary login cookie (za_s, HttpOnly, Secure, 30 days) on our own domain. Payments are processed by Stripe; we never see full card details.

Sub-processors

• Cloudflare, Inc.: hosting, database
• Stripe Payments Europe, Ltd.: payments

Retention and your rights

Analytics data is kept while the customer account is active. Account data is deleted on request after closing the account, except where we must keep billing records. You have rights under the UK GDPR, including access, rectification, erasure and to complain to the ICO.