Niu Stats – battery range stats for Niu electric scooters

Privacy policy

This page explains what data Niu Stats handles, why, and what your rights are. In short: you can look at the example charts without giving any data. If you sign in, your trips are saved only in your browser, and the server stores nothing about them. Google Analytics runs only if you accept it.

Who runs this site

Karol Szklarski runs Niu Stats as a private project and is the controller of the personal data described here. You can write to me at szklarskikarol@gmail.com. The site isn't affiliated with Niu.

When you load your data

All of this happens only if you sign in on the Load your data page. You don't have to: without signing in, the site shows an example scooter.

  • Login and password. Your browser sends your login and an MD5 hash of your password straight to Niu, which answers with an access token. Your login and password never reach this site's server, and the site doesn't save them.
  • Scooters. Your browser gets the list of your scooters straight from Niu, using the token.
  • Trips. Niu's trip list only accepts requests from its mobile app, so your browser sends your access token and your scooter's serial number to this site's server, which asks Niu for you. Niu's answer holds all the details of each trip, which can include where and when it started and ended. The server sends only each trip's id, date, distance and battery use back to your browser and discards the rest. It doesn't save your token or any of this data.
  • What stays in your browser. Your scooters' details as Niu lists them, and each trip's date, distance and battery use. They stay there until you press "Delete your data" on the home page or clear your browser's data.

I handle this data to give you the charts you asked for. The legal basis is Article 6(1)(b) GDPR: providing a service at your request.

Server logs

OVHcloud, which hosts the site in the European Union, records each request in its web server logs: your IP address, the time, the address requested, the page you came from and your browser. Your token and serial number aren't in these logs, because they travel in the body of the request. The logs help keep the site running and secure, which is my legitimate interest (Article 6(1)(f) GDPR). They are kept for the period OVHcloud sets for its hosting service.

Statistics: Google Analytics

Google Analytics runs only if you accept it in the cookie banner. It shows me how many people visit the site and which pages they read. The legal basis is your consent (Article 6(1)(a) GDPR). You can withdraw it at any time under "Cookie settings" at the bottom of the page, which doesn't affect what happened before. Declining changes nothing on the site.

If you accept, Google gets the page you're on, the page you came from, your IP address, which it uses to work out your approximate location, details of your device and browser, and random identifiers from two cookies. The site tells Google not to use this data for advertising. Google keeps it for at most 14 months after your last visit, and may transfer it to the USA under the EU-US Data Privacy Framework. More in Google's privacy policy.

The site doesn't give Google your login, scooters or trips. If you accept, though, Google's script runs on every page, including the sign-in page, and a script on a page can technically read what's on it. If you'd rather avoid that, decline.

Cookies and browser storage
NameKindPurposeKept for
cc_cookie Cookie of this site Remembers your choice in the cookie banner 6 months
_ga, _ga_WDN0Q9FRX8 Cookies of Google Analytics, only if you accept it Tell visits and visitors apart in the statistics 2 years, or until you withdraw consent
vehicles, trips Browser storage (localStorage) of this site, only if you load your data Your scooters and trips, for the charts Until you delete them
units Browser storage (localStorage) of this site, only if you switch to miles Remembers that you chose miles Until you switch back to km

You can also delete or block cookies in your browser's settings.

Who gets your data
  • OVHcloud hosts the site, so your requests and everything passing through the server go through its systems in the European Union.
  • Niu gets your login, password hash, token and requests, because you're signing in to your Niu account. It handles them as a separate controller under its own privacy policy, which says data may be transferred outside the European Union, currently to China.
  • Google gets the data described above if you accept Google Analytics, and your messages if you write to me.

I don't sell data, and nothing here involves automated decisions about you.

If you write to me

I use your address and message only to answer you, which is my legitimate interest (Article 6(1)(f) GDPR), and keep them for as long as it takes to deal with your question. The mailbox is on Gmail, so Google stores them.

Your rights

You have the right to access your data, get a copy, have it corrected or deleted, restrict how it's used, and move it elsewhere. You can object to uses based on legitimate interest and withdraw consent at any time. To use these rights, write to me. The data in your browser is under your control: "Delete your data" on the home page removes it. The server keeps none of it, so I can't look it up for you.

You can also complain to a data protection authority: in Poland, the President of the Personal Data Protection Office (Urząd Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa), or the authority in the country where you live.

Last updated: 5 November 2026.