TopStat

Home · Terms

Privacy Policy

Last updated: August 30, 2026

TopStat is a privacy-first web analytics service. This policy explains what we collect when you use our website and service, and how we handle it.

1. Analytics we collect (about your visitors)

When the TopStat script runs on your websites, we collect only aggregated, non-identifying data: page URLs, referrers, country (from IP, then discarded), device/browser type, and custom events you define. We do not use cookies, we do not fingerprint visitors, and we do not collect personal information about your visitors. Returning visitors are counted using a daily-rotating hash that cannot be linked back to an individual the next day.

2. Data we collect about you (the customer)

• Account data: email address and site IDs you register.
• Billing data: handled by our payment processor Dodo Payments. We never see or store your full card details. Dodo Payments may apply VAT based on your country.
• Subscription status (plan, billing period, status) stored to operate your account.

3. What we never do

• We never sell or share your data or your visitors' data with third parties for advertising.
• We do not build cross-site profiles.

4. Data retention & deletion

Analytics data is retained according to your plan (3 months on Free, 3 years on Pro, 5 years on Business). You can request deletion of your account and all associated data at any time by contacting support.

5. Compliance: GDPR, CCPA/CPRA & LGPD

GDPR (EU / EEA / UK): TopStat processes no personal data from your visitors — no IP storage, no cookies, no persistent identifiers — so analytics with TopStat generally requires no cookie consent banner under the ePrivacy Directive. We act as your data processor; you remain the data controller.

CCPA / CPRA (California): we do not sell or share personal information, we do not use or disclose sensitive personal information, and we do not profile consumers for advertising. Our script collects no personal information, so no opt-out mechanism is required for analytics.

LGPD (Brazil): the analytics data is anonymized data (dado anonimizado, Article 12) and therefore falls outside the LGPD's personal-data regime — no profiling, no advertising sharing, no identification of individuals.

Cookie-free declaration: the TopStat script sets zero cookies and uses no browser storage or fingerprinting. To document this for your own visitors, use our free, ready-to-publish privacy policy template — fill in your site name and copy it to your website.

6. Contact

Questions or requests (access, correction, deletion): service@topstat.top

中文

隐私政策（中文摘要）

TopStat 是隐私优先的网站分析服务：

• 关于访客：仅收集聚合、非身份识别数据（页面、来源、国家、设备类型与你定义的事件）；不使用 Cookie、不做指纹识别、不收集访客个人信息；回访识别使用每日轮换哈希。
• 关于你（客户）：收集账户邮箱与站点信息；支付由 Dodo Payments 处理，我们不接触你的完整银行卡信息；保存订阅状态用于运营账户。
• 我们绝不：出售或向第三方共享你的数据用于广告，也不进行跨站画像。
• 保留与删除：分析数据按套餐保留（免费版 3 个月、Pro 3 年、Business 5 年）；可随时联系支持删除账户与全部数据。
• 合规（GDPR / CCPA·CPRA / LGPD）：不存储访客 IP、不使用 Cookie 或任何持久标识符——按欧盟《电子隐私指令》，接入 TopStat 的网站通常无需 Cookie 同意横幅，我们作为数据处理方、你作为控制方；CCPA/CPRA 下不出售、不共享个人信息、不做广告画像；LGPD 下分析数据属第 12 条规定的匿名数据（dado anonimizado），不受个人数据制度约束。
• 一键隐私政策模板：我们提供可直接发布的隐私政策模板，填入你的网站名即可复制到自己的网站，向访客说明上述全部内容。