Privacy Policy

Overview

The short version: AxiaStats is a privacy-first analytics tool. We collect the minimum data necessary to operate the service. We never sell your data, never share it with advertisers, and never use cookies for tracking.

This Privacy Policy describes how AxiaStats ("we", "us", or "our") collects, uses, and protects information when you use our website analytics service at axiastats.com.

By using AxiaStats, you agree to the collection and use of information in accordance with this policy.

Data We Collect

We collect two types of data: data about visitors to your website (via the AxiaStats tracking script), and data about you as an AxiaStats account holder.

Visitor Tracking Data

When the AxiaStats script is installed on your website, it collects the following anonymous, aggregated data about your website visitors:

Page URL and referrer
Browser name and version
Operating system
Device type (desktop, mobile, tablet)
Country derived from IP address (IP is never stored)
UTM campaign parameters
Whether the session is new or returning (via a daily rotating hash — not a cookie)

We never collect or store: IP addresses, usernames, email addresses, passwords, financial data, or any personally identifiable information about your website visitors.

The daily rotating hash we use to distinguish unique visitors is a one-way hash of the IP + user agent + a daily salt. It cannot be reversed to identify an individual, expires every 24 hours, and is never stored in our database.

Account Data

When you create an AxiaStats account, we collect:

Email address (for account login and service communications)
Password (stored as a bcrypt hash — we never see your plain-text password)
Website domains you add to your account
Billing information (processed by Stripe — we do not store card details)

We use your email address to send you account-related communications (receipts, password resets, important service notices). We will not send marketing emails without your explicit consent.

Cookies

The AxiaStats tracking script uses zero cookies. Your website visitors will not have any cookies set by AxiaStats, and you do not need to show a cookie consent banner for AxiaStats tracking.

The AxiaStats web application (your dashboard at axiastats.com) uses a single, strictly necessary session cookie to keep you logged in. This cookie is:

Only set after you actively log in
Strictly necessary for the service to function
Not used for tracking or advertising
Deleted when you log out or after your session expires

Under GDPR and PECR, strictly necessary cookies do not require consent.

Data Retention

Analytics data is retained according to your plan:

Free plan: 30 days of analytics data
Pro plan: 12 months of analytics data
Business plan: Unlimited data retention

Account data (email, website list) is retained for as long as your account is active. If you delete your account, all associated data is permanently deleted within 30 days.

We do not sell, trade, or rent your data. Period. We may share data only in these narrow circumstances:

Stripe — for payment processing. Stripe's privacy policy governs data they handle.
Legal requirement — if required by law or a valid court order, we will notify you before complying where legally permitted.
Business transfer — in the unlikely event of a merger or acquisition, you will be notified and given the opportunity to delete your data.

Your Rights

Under GDPR, if you are an EU/EEA resident, you have the following rights:

Access — request a copy of all data we hold about you
Rectification — correct inaccurate data
Erasure — request deletion of your data
Portability — export your analytics data as CSV at any time from your dashboard
Objection — object to processing of your data
Restriction — request we restrict processing of your data

To exercise any of these rights, email us at privacy@axiastats.com. We will respond within 30 days.

Security

We take security seriously. Our measures include:

All data transmitted over HTTPS/TLS encryption
Passwords stored using bcrypt hashing
Infrastructure hosted on hardened servers with restricted access
Regular security reviews and dependency updates

No method of transmission over the Internet is 100% secure. We do our best to protect your data, but cannot guarantee absolute security.

Contact

If you have any questions about this Privacy Policy, please contact us:

Email: privacy@axiastats.com
Web: axiastats.com/contact

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on our website. The "Last updated" date at the top of this page reflects when changes were last made.