Privacy policy

1. Introduction

Stats (operated by Novamedia ehf., reg. no. 540606-2260) takes privacy seriously. This policy explains how we collect, use, and protect information.

Stats is designed privacy-first: no consent-required cookies, and visitor IP addresses are not stored. An IP address is personal data under the GDPR; we process it transiently to count daily visitors and derive coarse location, then discard it.

2. No cookies and no browser storage

Stats uses no cookies and stores nothing in a visitor’s browser to track them, so customers typically do not need a cookie banner for Stats alone.

To distinguish anonymous visitors we derive a hashed identifier on our servers from the IP address, browser details and site id, combined with a salt that rotates every 24 hours. The IP address is personal data processed for that purpose; neither it nor any other raw input is stored, and yesterday’s identifier cannot be linked to today’s.

The one exception is when a visitor opts out — we then store a single value (_stats_ignore) in the browser so we can honour that choice.

Tracking is disabled automatically when a browser sends Do Not Track (DNT) or Global Privacy Control (GPC).

3. Data we collect

For visitors on customer sites: page path, referrer, device/browser, coarse geo (country/region/city — IP is not stored), UTM parameters, and event names.

For accounts: email, company name, VAT/tax ID (if provided), billing details for invoicing, and product usage metadata.

4. Purpose of processing

We process data to provide analytics, generate AI insights, send service emails, bill subscriptions, and improve the product.

5. Retention

Analytics data is retained according to your plan (90 days on free, 1 year or unlimited on paid). Account/billing records are kept as required by law.

6. Sharing with processors

We do not sell personal data. We use trusted processors (hosting, email, AI) under data-processing agreements.

7. Your rights

You may request access, correction, or deletion of your data, and lodge a complaint with the Icelandic Data Protection Authority (Persónuvernd).

8. Contact

Privacy questions: stats@stats.is · Novamedia ehf., reg. no. 540606-2260.