Last Updated: July 22, 2025
Introduction
Bamboo Stats ("we", "us", or "our") operates the bamboostats.com platform, providing hosted access to privacy-first web analytics powered by Metric Panda technology. This Privacy Policy explains how we collect, use, and protect your information.
We are committed to privacy by design and GDPR compliance. We collect minimal data and give you full control over your information.
Data We Collect
Account Information
When you create a Bamboo Stats account, we collect:
- Email address (for login and communication)
- Encrypted password
- Account creation date
- Support communications
Website Analytics Data
For websites you connect to your account, we collect anonymized visitor data:
- Page URLs and referrer information
- Browser type and device category
- Country-level location (no IP addresses stored)
- Page load times and user interactions
Payment Information
Payment processing is handled by Stripe through Metric Panda. We do not store credit card details but maintain records of:
- Subscription status and billing dates
- Payment method type (not full details)
- Transaction history
What We Don't Collect
In line with our privacy-first approach, we specifically avoid:
- IP addresses or exact location data
- Personal identifiers or user profiles
- Cross-site tracking or fingerprinting
- Full credit card or payment details
- Advertising cookies or third-party trackers
How We Use Your Data
We use collected information solely for:
- Providing analytics services to your websites
- Account management and customer support
- Service improvement and security
- Billing and subscription management
- Legal compliance when required
We never: sell your data, use it for advertising, or share it with third parties except as outlined in this policy.
Data Storage & Security
- Data stored on secure servers in Canada
- Encrypted data transmission and storage
- Regular security audits and updates
- Limited access on a need-to-know basis
- Analytics data retained for 2 years by default
- Account data retained while account is active
Your Rights
Under GDPR and Canadian privacy law, you have the right to:
- Access all data we hold about you
- Correct any inaccurate information
- Delete your account and associated data
- Export your analytics data
- Withdraw consent at any time
- Object to data processing
To exercise these rights, contact us at privacy@metricpanda.click
Legal Basis for Processing
We process your data based on:
- Contract: To provide the analytics service you've subscribed to
- Legitimate Interest: To improve our service and ensure security
- Legal Obligation: To comply with applicable laws and regulations
- Consent: For marketing communications (opt-in only)
International Data Transfers
Your data is primarily stored in Canada. If we need to transfer data internationally, we ensure:
- Adequate protection under GDPR standards
- Appropriate safeguards are in place
- Limited transfer scope and duration
Cookies
We use minimal, essential cookies only:
- Login session cookies (required for platform access)
- Security and preference cookies
- No advertising or tracking cookies
Changes to This Policy
We may update this Privacy Policy occasionally. When we do:
- We'll provide 30 days advance notice
- Significant changes will be highlighted
- You can export your data if you disagree
- Continued use implies acceptance of changes
Contact Us
For privacy-related questions or to exercise your rights:
Governing Law
This Privacy Policy is governed by the laws of British Columbia, Canada, and applicable international privacy regulations including GDPR.