Privacy policy
Last updated: 21 August 2026
Staats provides website analytics. This policy covers two kinds of people: visitors to websites that use our tracking script, and customers who hold a Staats account.
If you're visiting a site that uses Staats
The tracking script is cookieless and stores nothing on your device. When you view a page, the site sends us: the page path, the referring domain, UTM campaign parameters if present, and any custom events the site has defined. From the request itself we derive your browser family, device type (desktop, mobile or tablet), and country.
We do not collect or store your IP address. It is used transiently, in memory, to compute a pseudonymous visitor identifier — a one-way salted hash that changes every day — and is then discarded. Yesterday's identifier cannot be connected to today's, and no identifier can be reversed into who you are. We never use fingerprinting, we set no cookies, and we do not track you across websites.
If you have a Staats account
We store the details Google provides at sign-in (your name and email address), the sites you create, their API keys, the analytics data your sites collect, the annotations and context saved by you or your tools, and records needed for billing.
Where data lives and how long it's kept
Data is stored with Supabase in the European Union (Frankfurt, Germany). Analytics events are deleted automatically after your site's retention period (365 days by default). Account data is kept while your account exists and is deleted when your account is.
What we don't do
- No selling or sharing of data with advertisers or data brokers
- No cross-site tracking or advertising identifiers
- No third-party analytics on our own pages — we use Staats
Your rights
You can request access to, correction of, or deletion of your personal data at any time. Site visitors should note we generally cannot identify individual visitors in analytics data — that is the point of the design.
Contact
Questions or requests: violetsmyster@gmail.com