Privacy Policy
This policy explains what personal data tracKeting collects, why, how we use and share it, and the rights you have. We handle personal data in line with the Swiss Federal Act on Data Protection (nFADP) and, where it applies, the EU General Data Protection Regulation (GDPR).
This is a plain-language policy drafted around our actual data practices. It is not legal advice.
1. Who we are & how to contact us
tracKeting (tracketing.com) is a competitive-intelligence and analytics service operated by tracKeting.com, based in Switzerland. We are the data controller for the personal data described here.
For any privacy question or to exercise your rights, email support@tracketing.com.
2. What data we collect
- Account data — your email address (you sign in passwordless by email one-time code, or with Google), and, if you use Google sign-in, your name and Google account identifier.
- Authentication state — a session token and your user id, stored in your browser's localStorage (not cookies) to keep you signed in.
- Billing data — if you subscribe, your Stripe customer and subscription identifiers, plan, and subscription status. We never see or store your full card number — card details are entered directly with Stripe, our payment processor.
- Support communications — anything you send us by email.
- Product data you view — the boards display publicly available social/creator/brand metrics; this is not your personal data.
- Usage & analytics data — how you use tracKeting: pages viewed, which board you are on, and the actions you take there (filters applied, sorts, searches within the app, navigation, checkout steps). This is collected through Google Analytics 4 and, where enabled, advertising pixels — see section 5. It includes technical data your browser sends automatically (approximate location from your IP, device and browser type, referring page) and an analytics identifier stored on your device. Where you are signed in, we also pass our internal numeric account id so your sessions can be linked across devices. We never send your email address, name, or authentication tokens to these services.
3. How we use your data & our legal basis
| Purpose | Data used | Legal basis (nFADP / GDPR) |
|---|---|---|
| Create and secure your account; sign you in | Email, Google identifier, session token | Performance of a contract |
| Provide the boards and features you request | Account data | Performance of a contract |
| Take payment and manage your subscription | Billing identifiers, email | Performance of a contract |
| Send transactional email (sign-in codes, billing notices) | Performance of a contract | |
| Keep the service secure and prevent abuse | Account data, request metadata | Legitimate interests |
| Understand how tracKeting is used so we can improve it | Usage & analytics data | Legitimate interests |
| Measure our marketing and advertising | Usage & analytics data, advertising identifiers | Legitimate interests |
| Comply with legal and accounting obligations | Billing records | Legal obligation |
4. Who we share it with (sub-processors)
We share personal data only with the service providers that run tracKeting, each bound to process it on our instructions. We do not sell your data.
| Provider | Purpose | Role |
|---|---|---|
| Xano | Backend application & database (accounts, billing state) | Processor |
| Cloudflare | Website hosting (Pages) & file storage (R2) | Processor |
| Postmark | Transactional email (sign-in codes, billing notices) | Processor |
| "Continue with Google" sign-in | Processor (independent controller for your Google account) | |
| Stripe | Payment processing & the billing portal | Independent controller of card data |
| Google Analytics (Google Ireland Ltd) | Product & marketing analytics — how the site is used | Processor |
| Meta Platforms | Advertising measurement (Meta pixel), when enabled | Joint / independent controller |
| X (Twitter) | Advertising measurement (X pixel), when enabled | Joint / independent controller |
Google Analytics data may be processed on servers in the United States. Google relies on the EU–US Data Privacy Framework and Standard Contractual Clauses for those transfers. The same applies to Meta and X where their pixels are active.
5. Cookies, local storage & analytics
We use analytics cookies, and advertising cookies where those pixels are enabled. Specifically:
- Analytics — Google Analytics 4 sets cookies containing a randomly generated identifier so we can tell repeat visits apart and understand which parts of the product are used. We record page views and in-app actions (which board you are on, filters, sorts, in-app searches, navigation, checkout steps) together with technical data your browser sends automatically.
- Advertising — where enabled, the Meta and X advertising pixels set their own cookies so we can measure which advertising leads to sign-ups and subscriptions, and build audiences for our own advertising. Only conversion-funnel events (search, sign-up, checkout started, purchase, upgrade-CTA clicks) are shared with them; your in-app filtering and browsing behaviour is not.
- Essential storage — your browser's localStorage holds your sign-in token and user id, plus small interface flags (for example, dismissing a promotional banner or recording your cookie choice). Signing out clears your session.
- Third parties — Stripe and Google may set their own cookies when you interact with their hosted checkout, portal, or sign-in screens, governed by their own privacy policies.
Your choice. We show a cookie notice on your first visit and record what you choose. You can reopen the cookie notice at any time and change your answer. To stop analytics entirely you can also use your browser's cookie controls, a tracking-blocker, or Google's opt-out add-on, and you can object to this processing at any time by emailing support@tracketing.com, which we will action.
Please note: tracKeting is an early-stage product and we currently load analytics for all visitors in order to understand basic usage, so declining the notice does not by itself stop analytics collection today. If you do not want your usage measured, use one of the controls above or contact us and we will exclude you. We are working towards enforcing the notice choice directly.
6. How long we keep it
We keep account data for as long as your account is active. If you close your account, we delete or anonymise your account data within a reasonable period, except records we must retain for legal or accounting reasons (for example, invoices and payment records, typically up to 10 years under Swiss law).
7. Your rights
Subject to the nFADP and GDPR, you have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent where processing is based on it. To exercise any of these, email support@tracketing.com; we will respond within the timeframe the law requires. You also have the right to lodge a complaint with your data protection authority (in Switzerland, the Federal Data Protection and Information Commissioner; in the EU, your local supervisory authority).
8. International transfers
Some of our providers process data outside Switzerland and the EU/EEA (for example, in the United States). Where that happens, transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses and equivalent Swiss mechanisms, so your data keeps a comparable level of protection.
9. Security
We protect your data with encryption in transit (HTTPS), access controls, passwordless authentication, and reputable infrastructure providers. No method of transmission or storage is perfectly secure, but we work to protect your information and to address issues promptly.
10. Children
tracKeting is not directed to children and is intended for users aged 16 or older. We do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.
11. Changes to this policy
We may update this policy as the service evolves. We will change the effective date above and, for material changes, take reasonable steps to notify you. Questions? support@tracketing.com.