Privacy Policy

1. What information do we collect?

Account data. When you sign up, we collect your name, email address, and a securely hashed password. If you enable two-factor authentication, we store an encrypted TOTP secret tied to your account.

Billing data. Payments are processed by Stripe. We store your Stripe customer ID, subscription status, and renewal date. We never see or store your full card number - Stripe handles all card collection directly and securely.

Site analytics data. We collect aggregated, anonymised visitor data for the websites you connect to TrackTrendy - including page views, referral sources, countries, browsers, and devices. This data contains no personally identifiable information about your visitors. No IP addresses are stored. No cookies are used for visitor tracking.

Google Search Console data. If you choose to connect your Google account, we store an OAuth access token to retrieve Search Console performance data (clicks, impressions, position) on your behalf. We request read-only access only and never modify your Google data.

Communications. We send transactional emails - such as account setup, password reset, subscription updates, and weekly analytics reports - via Amazon SES. We do not send marketing emails without your explicit consent.

2. How do we use your information?

We use the information we collect to:

• Create and manage your account
• Provide your analytics dashboard and all related features
• Process payments and manage your subscription
• Send transactional emails related to your account
• Display aggregated analytics for sites you own or have been invited to access
• Improve the security, performance, and reliability of our services

We do not sell your data. We do not use your data for advertising. We do not share your data with third parties for their own marketing purposes.

3. Will your information be shared with anyone?

We share data with the following third-party providers who help us operate our services:

• Stripe - payment processing and subscription management
• Amazon SES - transactional email delivery
• Cloudflare - CDN, DDoS protection, and access control
• Hetzner - server infrastructure (Frankfurt, EU)
• Google - Search Console API access, when explicitly connected by you

All infrastructure is located in the EU. Your data does not leave the EU except where the above third-party services operate their own infrastructure. Each of these providers maintains their own privacy and data protection standards.

We may also disclose your information if required to do so by law, court order, or to protect the rights and safety of our users or the public.

4. Do we use cookies and other tracking technologies?

The TrackTrendy portal uses one session cookie to maintain your logged-in state. This cookie is strictly necessary for the service to function and contains no tracking or advertising data.

The analytics tracking we provide for your visitors' websites is cookieless by design. We do not set any cookies on your visitors' browsers. Our tracking script does not fingerprint users or store any personally identifiable information.

5. How long do we keep your information?

We retain your account information for as long as your account remains active. When you delete your account, your personal data (name, email, password, 2FA secret, Google tokens) is permanently removed immediately. Analytics data associated with your sites is removed within 30 days of account deletion.

Billing records may be retained for up to 7 years where required by tax and accounting law.

6. How do we keep your information safe?

We protect your information through the following measures:

• Passwords are hashed using bcrypt and never stored in plain text
• All data is transmitted over HTTPS (TLS)
• Access to the admin panel and server is restricted and protected
• Two-factor authentication is available for all accounts
• Our infrastructure is protected by Cloudflare and hosted on Hetzner in Frankfurt, EU

While we do everything we can to protect your data, no method of transmission over the internet is 100% secure. We encourage you to use a strong password and enable two-factor authentication.

7. Do we collect information from minors?

TrackTrendy is not directed at children under the age of 18. We do not knowingly collect data from minors. If you believe we have inadvertently collected information from a minor, please contact us immediately at privacy@tracktrendy.com and we will take steps to delete it.

8. What are your privacy rights?

Under GDPR, if you are a resident of the European Economic Area, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict our processing of your data
• Request a portable copy of your data

You can update your name and password directly in your account Settings. You can delete your account at any time from the Settings tab - this immediately and permanently removes your personal data.

For any other requests, contact us at privacy@tracktrendy.com. You also have the right to lodge a complaint with your national data protection authority.

9. Do we make updates to this policy?

We may update this privacy policy from time to time. The updated version will be indicated by an updated date at the top of this page. If we make material changes, we will notify you by email or by a prominent notice in the dashboard.

10. How can you contact us?

If you have questions or comments about this policy, you may email us at privacy@tracktrendy.com. We aim to respond to all privacy-related requests within 30 days.