Privacy Policy

1. Who We Are

NuraStats is operated by HOST SERVER SRL, a company registered in Romania, European Union. If you have any questions about this policy or your data, you can contact us at: office@nurastats.com

2. What Data We Collect and Why

We collect data in two contexts: data from NuraStats users (people who sign up for an account) and data collected through the NuraStats tracking script on your visitors' behalf.

2a. Account Data (NuraStats Users)

When you create a NuraStats account, we collect:

• Name and email address — to identify your account and send transactional emails (e.g. password resets, billing receipts).
• Billing information — handled entirely by Stripe. We do not store your card details on our servers.
• Website domains — the sites you add to your account for tracking.

Legal basis (GDPR): Performance of a contract (Art. 6(1)(b)) — this data is necessary to provide you with the service.

2b. Analytics Data (Your Website Visitors)

When you install the NuraStats tracking script on your website, we collect anonymised, aggregate data about your visitors:

• Page URL and referrer
• Browser type, operating system, and device type
• Country derived from a temporary IP lookup — the IP address itself is never stored
• UTM campaign parameters (if present in the URL)
• Custom events you choose to track

We do not use cookies, local storage, or any persistent identifiers to track individual visitors. Each page view is processed independently. No personal data about your website visitors is stored.

Legal basis: Legitimate interests (Art. 6(1)(f)) — providing privacy-preserving analytics that do not identify individuals.

3. Third-Party Processors

We use the following third-party services that may process your data as part of providing NuraStats:

• Resend (transactional email) — used to send account-related emails such as password resets and billing notifications. Your email address is shared with Resend for this purpose only. No marketing emails are sent. Resend Privacy Policy
• Stripe (payment processing) — used to process subscription payments. Your payment data is entered directly into Stripe's secure checkout and is never stored on our servers. Stripe Privacy Policy

4. Data Storage and Location

All data is stored on servers located in the European Union (France). We do not transfer personal data outside the EU/EEA, except as described in Section 3 (Resend and Stripe, both of which provide appropriate GDPR safeguards under Standard Contractual Clauses).

5. Data Retention

• Account data — retained while your account is active. After account deletion, your data is permanently removed within 7 days (a brief retention window to allow account recovery if deletion was accidental).
• Analytics data — retained for as long as your subscription's data retention period allows (as specified in your plan).
• Billing records — retained as required by Romanian and EU tax law (typically 10 years).

6. Your Rights Under GDPR

As a data subject under the GDPR, you have the following rights:

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — request correction of inaccurate data.
• Right to erasure — request deletion of your personal data.
• Right to data portability — request your data in a machine-readable format.
• Right to object — object to processing based on legitimate interests.
• Right to restrict processing — request that we limit how we use your data.

To exercise any of these rights, contact us at office@nurastats.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Romanian data protection authority (ANSPDCP) at dataprotection.ro, or with the supervisory authority in your country of residence.

7. Cookies

NuraStats does not set any cookies on your website visitors' browsers. For NuraStats users logged into the dashboard, we use a session cookie solely to maintain your login state. This cookie is strictly necessary for the service to function and does not require consent under the ePrivacy Directive.

8. Security

We take appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. All data is transmitted over HTTPS. Access to production systems is restricted to authorised personnel only.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. Continued use of NuraStats after changes are posted constitutes your acceptance of the updated policy.

10. Contact

For any privacy-related questions or requests:
HOST SERVER SRL
Romania, European Union
office@nurastats.com