Privacy text for your site
Anyone embedding the counter has to tell their visitors what happens. Here it is – a paragraph to copy, and next to it the entries that belong in a record of processing activities.
The paragraph for your privacy policy
General version. Open this page through your counter's management link and it will carry your counter number and match your settings.
Visitor counter This website uses the Stats4U visitor counter (stats4u.net, LW IT Solutions Company, Łódź, Poland). When a page is opened, your browser loads a counter image from stats4u.net and, as a technical necessity, transmits its IP address, the browser identification and the address of the page being viewed. The IP address is used to determine country and city approximately and to build a daily hash, which counts a visitor only once per day. It is not stored in the statistics. The daily hash is built with a secret salt that changes every day and is deleted after 2 days; after that it cannot be traced to anyone. The web server's access log holds the IP address for up to 14 days. The counter sets no cookies and reads nothing from your device. What is stored are daily totals: hits, visitors, country, browser, operating system, language, the pages of this website that were opened, and the domain of the referring page. They are kept for 400 days. Processing takes place in Poland; no data is transferred to third countries. The legal basis is our legitimate interest in audience measurement (Art. 6(1)(f) GDPR). Stats4U privacy policy: https://www.stats4u.net/privacy
What the counter collects
This overview is generated from the system configuration and describes the actual state.
| Item | Purpose | Stored | Retention |
|---|---|---|---|
| IP address | derive country and city; goes into the daily hash | not in the statistics | 14 days in the server log |
| Daily hash (salted) | count a visitor once per day | yes, 16 bytes | 2 days |
| User agent | browser, operating system, bot detection | no, only the result | – |
| Page URL | most visited pages | yes | 400 days |
| Referrer | where visitors come from | domain only | 400 days |
| Browser language | language breakdown | only the result | 400 days |
The daily hash is built from IP, user agent, counter number, date and a secret salt that changes every day and is deleted after 2 days. After that, not even a known IP allows anyone to work out which hash belonged to whom. Because the counter number is part of it, the same visitor on two different sites cannot be recognised as the same person.
The counter sets no cookies and reads nothing from your device. On stats4u.net itself a session cookie is set only when you create or change a counter.
E-mail address of the counter owner. Some counters from before 2026 have one on file; new ones are not being collected at present. It serves one single purpose: to send the management link to that exact address on request – no other address can be given. It is stored in plain text, never passed on and never used for advertising. There is no automatic deletion period; it is removed on request through the support form.
The statistics pages serve Google AdSense advertising. A consent layer asks for your agreement first. The home page and the blog carry no advertising.
The legal basis for counting is the site owner's legitimate interest in audience measurement (Art. 6(1)(f) GDPR).
Whoever embeds the counter on their site is the controller for the data collected there; Stats4U processes it on their behalf.
LW IT Solutions Company Lukas Wójcik
al. Tadeusza Kościuszki 80/82, lok. 301, 90-437 Łódź, Poland
stats4u@lukaswojcik.com
Details under Art. 28(3) GDPR
- Subject matter
- Audience measurement for the website on which the counter is embedded.
- Duration
- For as long as the counter is embedded; after that the retention periods below apply.
- Nature and purpose
- Collecting, aggregating and displaying access figures.
- Type of data
- IP address (processed, not stored in the statistics), browser identification, address of the page opened, referrer (domain only), browser language.
- Data subjects
- Visitors to the website on which the counter is embedded.
- Place of processing
- Poland (EU). No transfer to third countries.
- Sub-processors
- None for the counting. Country and city are determined on the same server from a local database; no external service is queried.
- Retention periods
- Daily hash 2 days, web server access log 14 days, daily totals 400 days.
- Technical measures
- Delivered over HTTPS only. No cookie. The salt of the daily hash changes every day and is deleted after 2 days. The counter number is part of the hash: the same visitor cannot be recognised as the same person across two different websites.
- Rights of data subjects
- Access and erasure through the support form. After 2 days no attribution is technically possible any more, because the salt has been deleted – not even by the operator.
What is not here
This is not legal advice. The text describes what this service does; whether it is enough for your site depends on your jurisdiction and your lawyer.
A signed data processing agreement is not offered at present. If your supervisory authority or your employer requires one, this counter is currently not the right choice for you – saying so plainly is more honest than handing you a paper nobody has signed.