MyStat
MyStat is a lightweight website analytics and visitor counter service that uses page tags and analytics cookies to measure traffic, unique visitors and returning users.
What does MyStat do?
What MyStat is
MyStat is a lightweight website analytics and hit counter service. Site owners add a small page tag to their pages, and MyStat records visits, page views, unique visitors and returning users. It is designed to give a quick overview of traffic without the complexity of a full analytics suite.
Because it relies on a tag loaded in the visitor browser and on cookies to tell visitors apart, MyStat falls squarely within the scope of European cookie and data protection rules.
What data and cookies it collects
MyStat typically sets analytics cookies that distinguish first time visitors from returning ones and help estimate unique visits. It also processes technical data such as IP address, browser type, referring page and the pages viewed. Even when no name or email is collected, an IP address combined with a device identifier is considered personal data under the GDPR.
This places MyStat in the category of tracking technologies that require careful handling, clear disclosure and, in most cases, prior consent from the visitor.
GDPR and ePrivacy implications
Under the ePrivacy Directive, storing or reading information on a visitor device requires consent unless the cookie is strictly necessary. Analytics cookies are not strictly necessary, so they need consent before they are set. The GDPR then governs how the resulting personal data is processed, secured and retained.
Operators must provide transparent information about MyStat in their privacy and cookie notices and must be able to demonstrate a valid legal basis for the processing.
Consent requirements
Consent for MyStat must be freely given, specific, informed and unambiguous. The MyStat tag should be blocked until the visitor actively accepts analytics cookies through a consent banner. Pre ticked boxes and implied consent are not valid, and withdrawing consent must be as easy as giving it.
International data transfers
Depending on where the provider hosts its infrastructure, MyStat data may be processed outside the European Economic Area, including in the United States. Such transfers require a valid transfer mechanism, for example Standard Contractual Clauses or reliance on an adequacy decision, together with supplementary measures where needed.
Practical compliance steps
Load MyStat only after consent, list its cookies in your cookie policy with accurate purposes and durations, sign a data processing agreement with the provider, and verify where data is stored. Keep retention to what is necessary and review your configuration regularly to confirm that no analytics cookie is set before the visitor agrees.
MyStat and the GDPR
MyStat is classified as “Analytics”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.
- Legal basis
- Consent under Art. 6(1)(a) GDPR
- Risk level
- medium
- Applicable regulations
- GDPR, ePrivacy Directive
Impact assessment (DPIA)
Because MyStat sets analytics cookies and can build visitor profiles across sessions, assess the scale of monitoring, the categories of visitors affected and any onward transfer of identifiers. A full DPIA is usually not mandatory for a single low traffic site, but a documented screening assessment is recommended, especially where IP addresses or device identifiers are processed.
Sample text for your banner
We use MyStat analytics cookies to count visits and understand how our website is used. These cookies are only set if you accept. You can withdraw your consent at any time through our cookie settings.
What MyStat sets and contacts
- Tracking method
- Page tag with first-party and third-party analytics cookies
- Server location
- Provider operated servers, may include locations outside the EEA
- Data transferred outside the EU
- Visitor and usage data may be processed on provider infrastructure that can be located outside the European Economic Area, including the United States, depending on the provider configuration.
Cookies set (4)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| is_visitor | Analytics | 5 years | Distinguishes first time visitors from returning ones to estimate unique visits. |
| is_session | Analytics | Session | Tracks a single browsing session to count page views and visit duration. |
| is_unique | Analytics | 1 year | Stores a random visitor identifier used to deduplicate visit counts over time. |
| is_ref | Analytics | 30 days | Records the referring source of a visit for basic traffic source statistics. |
Third-party domains contacted (3)
mystat.iocdn.mystat.iostats.mystat.io
Frequently asked questions about MyStat
Can't find your question? Write to us, we answer fast.
Which cookies does MyStat set?
MyStat sets analytics cookies that distinguish first time visitors from returning ones and help estimate unique visits. These cookies usually store a random visitor identifier rather than a name. Because they are not strictly necessary, they require consent before being placed.
Is consent required for MyStat?
Yes. MyStat relies on analytics cookies that are not strictly necessary, so under the ePrivacy Directive prior consent is required before the tag loads. The MyStat script should stay blocked until the visitor accepts analytics cookies.
What is the legal basis for processing with MyStat?
The appropriate legal basis is the visitor consent under Art. 6(1)(a) GDPR, obtained through a clear cookie banner. Legitimate interest is generally not suitable here because the ePrivacy Directive already requires consent for non essential analytics cookies.
Does MyStat transfer data outside the EU, to the US in particular?
It can. Depending on where the provider hosts its servers, visitor data may be processed outside the European Economic Area, including in the United States. In that case you need a valid transfer mechanism such as Standard Contractual Clauses and any required supplementary measures.
Is a DPIA needed for MyStat?
For a single low traffic website a full DPIA is usually not mandatory, but a documented screening assessment is recommended. A DPIA becomes more likely if MyStat is used at large scale or combined with other tracking that enables systematic monitoring.
How do I implement MyStat compliantly?
Block the MyStat tag until consent is given, disclose its cookies in your cookie policy, sign a data processing agreement with the provider and confirm where data is stored. Keep retention short and test that no analytics cookie appears before the visitor accepts.
What are the alternatives to MyStat?
Privacy friendly, cookieless analytics tools such as Matomo in cookieless mode, Plausible or Fathom can measure traffic with little or no consent burden. They are good options if you want simple statistics while reducing cookie and transfer obligations.
How do I update the cookie policy for MyStat?
List each MyStat cookie with its name, purpose and duration, state that analytics cookies load only after consent and explain how visitors can withdraw consent. Review the entry whenever the provider changes its cookies or hosting locations.
Biano
Biano is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Biano supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Biano enables informed decisions that improve experience and drive results.
Adobe Experience Platform Identity Service
Adobe Experience Platform Identity Service is an identity and authentication platform providing secure login, single sign-on (SSO), and multi-factor authentication for websites and applications. It supports social login, passwordless authentication, and user management with enterprise-grade security. Adobe Experience Platform Identity Service simplifies identity implementation for developers while ensuring compliance. With adaptive authentication and anomaly detection, Adobe Experience Platform Identity.
Tableau
Tableau is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Tableau supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Tableau enables informed decisions that improve experience and drive results.
Google Tag Manager for WordPress
Google Tag Manager for WordPress is a popular web platform powering millions of websites worldwide, offering a flexible and extensible foundation for building any type of online presence. It provides themes, plugins, and a user-friendly admin interface for developers and non-technical users. Google Tag Manager for WordPress supports e-commerce, blogging, portfolios, and enterprise websites with robust customization options. With a massive community and continuous updates, Google Tag Manager for WordPress.
Mint
Mint is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Mint supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Mint enables informed decisions that improve experience and drive results.
Noibu
Noibu is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Noibu supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Noibu ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.