diff --git a/app/site.rb b/app/site.rb
index 09564eb1..1a0b7bbf 100644
--- a/app/site.rb
+++ b/app/site.rb
@@ -103,7 +103,7 @@ get '/site/:username/stats' do
 
   stats = stats_dataset.all.reverse
 
-  if params[:format] == 'csv'
+  if current_site && @site.owned_by?(current_site) && params[:format] == 'csv'
     content_type 'application/csv'
     attachment "#{current_site.username}-stats.csv"
 
diff --git a/views/site/stats.erb b/views/site/stats.erb
index d2b0d1a2..ed944187 100644
--- a/views/site/stats.erb
+++ b/views/site/stats.erb
@@ -166,11 +166,13 @@
 
         <canvas id="myChart" style="width:100%;height:300px;display:block"></canvas>
 
+        <% if @site == current_site %>
         <div class="row">
           <div class="col col-50">
             <p><a href="?days=<%= params[:days] %>&format=csv">Export as CSV File</a></p>
           </div>
         </div>
+        <% end %>
 
         <!--
         <div class="row">