Privacy Policy

Last updated: March 12, 2026

Who we are

HushStats is a privacy-first web analytics service operated at hushstats.com. When we say "we," "us," or "our," we mean HushStats. When we say "you," we mean you — either as a HushStats account holder or as a visitor to a website that uses HushStats.

What we collect from website visitors (people visiting sites that use HushStats)

When you visit a website that uses our tracking script, we collect the following data for each pageview:

  • Page URL and hostname
  • Referrer URL (the page you came from)
  • Country (derived from your IP address at the time of the request — the IP itself is not stored)
  • Browser name and version
  • Device type (desktop, mobile, tablet)
  • Screen size
  • UTM campaign parameters (if present in the URL)

What we do NOT collect from website visitors:

  • IP addresses (discarded after country lookup)
  • Cookies (we never set any)
  • Personal information (names, emails, etc.)
  • Browser fingerprints
  • Cross-site tracking data
  • localStorage or sessionStorage data

All analytics data is aggregated. We do not create individual visitor profiles and have no way to identify specific people from the data we collect. The data cannot be used to track or re-identify individuals.

What we collect from HushStats account holders

When you create a HushStats account, we collect:

  • Email address (for login and account communication)
  • Password (hashed with PBKDF2-SHA256 — we cannot read your password)
  • Payment information (processed by Stripe — we do not store card numbers)
  • Site domains you add to your account

This data is stored in our database (Cloudflare D1) and is used only for providing the HushStats service. We do not sell, share, or rent your personal information to third parties.

Cookies

Our tracking script sets zero cookies on your visitors' browsers. The HushStats website itself uses a session cookie when you log in to your account — this is a strictly necessary cookie for authentication and does not require consent under GDPR.

GDPR compliance

HushStats is designed to be GDPR-compliant by default:

  • We do not process personal data of website visitors
  • We do not set cookies on website visitors
  • We do not track visitors across websites
  • No consent banner is required for our tracking script

For HushStats account holders, we process your email address and payment information under the legal basis of contractual necessity (Article 6(1)(b) GDPR) — we need this data to provide you with the service you signed up for.

Your rights (GDPR & CCPA)

If you have a HushStats account, you have the right to:

  • Access your personal data (email, account info)
  • Correct inaccurate data
  • Delete your account and all associated data
  • Export your data in a machine-readable format
  • Object to processing of your personal data

If you're a visitor to a website using HushStats, we don't have any personal data about you to access, correct, or delete — because we never collected any.

To exercise any of these rights, email privacy@hushstats.com.

Data storage and security

  • Analytics data is stored in Cloudflare Workers Analytics Engine (edge-distributed globally)
  • Account data is stored in Cloudflare D1 (serverless SQL database)
  • Passwords are hashed with PBKDF2-SHA256 (100,000 iterations)
  • All data is transmitted over HTTPS
  • Payment processing is handled by Stripe (PCI-DSS compliant)

Third-party services

  • Cloudflare — infrastructure and data storage
  • Stripe — payment processing

We do not use Google Analytics, advertising networks, or any other tracking services on hushstats.com.

Data retention

  • Analytics data is retained according to your plan (Free: 30 days, Pro: 6 months, Business: 1 year)
  • Account data is retained until you delete your account
  • When you delete your account, all associated data is permanently removed

Changes to this policy

We may update this privacy policy from time to time. We'll post the updated version here and update the "Last updated" date. For significant changes, we'll notify account holders by email.

Contact

Questions about this policy? Email privacy@hushstats.com.