Staats
Data & Privacy
100% cookieless by design, zero PII stored, GDPR-ready out of the box, and fully exportable.
How visitors are counted
There are zero cookies, zero localStorage entries, and no persistent device identifiers. Every recorded event carries a pseudonymous visitor hash generated from the visitor's IP address, User-Agent header, current date, and a rotating cryptographic salt. This hash rotates daily at midnight UTC to prevent cross-day user profiling. The IP address itself is evaluated strictly in memory and is never written to disk.
Country inference without IP geolocation
Visitor country is derived entirely from the browser's IANA timezone (e.g. Europe/Berlin → DE) mapped against standard open timezone tables. No IP addresses are shared with third-party geolocation databases.
Plans, quotas, and data retention
| Plan | Monthly Events | Sites | Data Retention |
|---|---|---|---|
| Free | 10,000 | 1 | 30 days |
| Pro | 100,000 | 10 | 1 year |
| Growth | 1,000,000 | 25 | 2 years |
| Scale | 10,000,000 | 50 | 3 years |
Event quotas feature a 200% soft buffer: collection continues smoothly past 100% and only pauses at double your allowance until the month resets. Proactive notices appear in dashboard and MCP responses from 80% usage. Historical events past your plan retention window are cleaned nightly.
Data export
Export all historical events for any site at any time as clean, structured CSV files directly from your dashboard.
Immediate deletion & data sovereignty
Deleting a site immediately and permanently purges all associated events and deploy annotations. Deleting an account cancels any active subscription and permanently removes all sites, keys, and event history.