Staats
Terms of service
Last updated: 1 September 2026
Staats is a website analytics service: a tracking script you add to your sites, and an MCP server your tools and AI agents query. By creating an account or using the service you agree to these terms.
Your account
You sign in with Google and are responsible for what happens under your account, including keeping your API keys secret. Rotate or revoke access by contacting support@staats.ai if a key leaks. You can delete your account at any time from the dashboard; deletion cancels any subscription and permanently removes your sites and data.
Acceptable use
- Only instrument websites you own or have permission to measure.
- Comply with the laws that apply to you and your visitors, including giving any notices your jurisdiction requires for analytics.
- Don't attempt to disrupt the service, evade its limits, probe other accounts' data, or resell access without agreement.
Accounts abusing the service or the people running it can be suspended or terminated.
Plans and billing
Free and paid plans are limited by monthly events, error events, sites, and data retention as described at sign-up. Purchases are processed by Polar, our merchant of record (their terms govern payment, invoicing, and refunds). Plan changes and cancellation are self-serve through the billing portal. When usage exceeds a plan's limits, collection can pause until the next month or an upgrade, as described in the dashboard.
Your data
The analytics data your sites collect belongs to you. You can export your traffic data (pageviews and custom events) as CSV at any time, and deleting a site or your account permanently deletes all of its data, error records included. How data is collected and stored is described in the privacy policy, which is part of these terms.
Data processing
For visitor data collected from your sites, you are the data controller and Staats acts as your data processor under UK and EU data protection law. This section is the data processing agreement between us, and it applies automatically to every account.
We process that data only to provide the service: pageview, custom and error events as described in the privacy policy, including the transient in-memory use of visitor IP addresses to compute the daily-rotating visitor identifier. We act only on your documented instructions, which are the settings you choose in the product. We never use your visitors' data for our own purposes, never sell it, and never share it with advertisers.
Our sub-processor is Supabase, which hosts the database and infrastructure in the European Union (Frankfurt, Germany). We will give reasonable notice before adding or replacing a sub-processor, and if you object you can delete your sites or account, which removes the data. Everyone with access to the data is bound by confidentiality, and data is encrypted in transit and protected by deny-by-default access controls, as described in the data documentation.
We will tell you without undue delay if we become aware of a personal data breach affecting your sites' data, help you respond to data subject requests that concern it, and make available the information reasonably needed to demonstrate compliance. When you delete a site or your account, or when your retention period expires, the data is permanently deleted as described in the privacy policy.
Telling your visitors about analytics remains your responsibility as the controller. The data documentation includes a privacy policy paragraph written for exactly that purpose.
Service changes and availability
Staats is provided as-is, without uptime guarantees. Features may evolve; material changes to these terms or to pricing will be announced with reasonable notice, and continued use after notice means acceptance.
We may also discontinue the service. If that happens we will give at least 30 days' notice by email, stop charging you from the date of that notice and refund the unused part of any period you have paid for, and keep your data and its CSV export available throughout the notice period so you can take it with you. At the end of it your data is permanently deleted, as it is whenever you delete a site or your account.
Liability
To the maximum extent the law allows: the service comes without warranties, and total liability for any claim is limited to the fees you paid in the twelve months before the claim arose. Nothing in these terms excludes liability that cannot lawfully be excluded.
Governing law
These terms are governed by the law of England and Wales.