StatCite is a read-only data service. It is designed to know as little about you as possible.
What we collect
No accounts. There is no signup, login, API key, or user database.
What the service records, precisely. The service's own usage records contain no free-text queries, claimed values, IP addresses, user agents, headers, or complete request payloads. For aggregate service analytics it records a small set of standardised request categories per call: which tool or endpoint was used, the registry indicator key requested (unrecognised indicators are collapsed to a generic bucket), the resolved ISO3 country code (unresolvable inputs are dropped), the verification verdict kind, success/error outcome, and response time. These fields are drawn from closed sets in code, so arbitrary user text cannot enter the analytics stream. They are emitted as structured log lines within our hosting platform's (Cloudflare) standard short-lived observability retention. We keep no separate long-term store of them. We do not build profiles or sell any data.
Aggregate traffic counts. We read aggregated daily request counts from Cloudflare's analytics, grouped by user-agent string and response status, and for this website's pages also by the page path, to see which clients use the service and which crawlers can find it. We keep daily totals, including Cloudflare's own count of unique visitors, the most common user-agent strings and the most requested public page paths privately. Requests for paths this site does not publish are counted, and the paths are not kept. Anything in a user-agent string that looks like an email address is removed before it is kept. We never read or keep IP addresses.
No cookies and no cross-site tracking. Cloudflare Web Analytics runs on this site's pages. It counts page views without cookies, without an identifier for you, and without following you to any other site. Nothing else runs.
Third parties
Requests are served by Cloudflare (hosting/CDN), whose own privacy policy applies at the network level. Cloudflare creates and retains its own network-level operational logs, which can include IP addresses, under its own policy. We do not export or store those logs. What we read from Cloudflare is the aggregated analytics described above. Data queries are forwarded to official statistical APIs without any information about you attached, so the upstream request contains only the series being requested. The full set of hosts this service contacts: the World Bank (api.worldbank.org), the IMF DataMapper (www.imf.org), the IMF SDMX API (api.imf.org), the BIS (stats.bis.org), the ECB Data Portal (data-api.ecb.europa.eu), Frankfurter (api.frankfurter.dev, ECB reference rates), DBnomics (api.db.nomics.world) and GitHub Pages (asokore.github.io, which hosts the collected Eastern Caribbean Central Bank and Central Bank of Barbados tables). FRED is not queried: it is permanently disabled on this deployment (see the documentation ยง8).
Two further hosts are contacted by your browser rather than by the service: static.cloudflareinsights.com serves the analytics script, and cloudflareinsights.com receives the page-view count.
Email
If you email hello@statcite.com we keep the correspondence to answer you, nothing more.
Changes
Material changes to this policy will be posted on this page with an updated effective date.