| Page | Covers |
| What we store, and what we don't | The complete field list, and what we deliberately cannot do |
| Do you need a cookie banner? | The honest answer, which depends on which mode you are on |
| How visitors are counted | The mechanism in each of the three modes |
| GDPR | Our position, plainly stated |
| Data processing agreement | |
| Where your data is stored | |
| Deleting your data | Yours, and a visitor's |
The headline, stated correctly
TrueStat's default mode sets one first-party cookie. It contains a random identifier and nothing else, it is set on your own domain, and it is never shared with anyone. But it is a persistent cookie, and in the EU and UK that generally means you need a notice.
Two cookieless modes are available, and on those there is no banner to consider because nothing is stored on the visitor's device at all. They cost accuracy, and Do you need a cookie banner? says exactly how much.
If you have seen "no cookie banner needed" attached to TrueStat anywhere, it is true of those two modes and not of the default.
What never happens, on any mode
No visitor IP address is ever stored. Not in the events table, not in a log, not in an error message.
No cross-site tracking. Identifiers are scoped to your site, so the same person on two customers' sites produces two unrelated values.
No data is sold, shared or used for advertising.
No individual visitor lookup exists — not for you, not for us. See What we deliberately cannot do.
A note on this section
These pages are a promise, not a description of an intention. Every sentence here is meant to be true of the shipped product. If one stops being true, that is a fault to fix immediately, not a documentation backlog item — and support@truestat.io is where to tell us.
These pages are not legal advice. If you have counsel, this section is written to be the thing you hand them.