Last updated 1 October 2026
Privacy policy
trckable is analytics that stores no IP addresses and sells nothing. This page holds us to the same standard: what we collect, why, who else handles it, and how to have it deleted.
In short
- This website counts its own visits with trckable Cloud, which stores no IP address, and sets one first-party cookie for it. The payment page loads Paddle's script. The documentation runs no analytics.
- trckable Cloud keeps what it needs to run your account: your email address, your name, your sites and their analytics. Nothing is sold, used for advertising or used to train AI models.
- The self-hosted software sends us nothing. No telemetry, no phoning home.
- For the people who visit your sites, no IP address is ever stored, by Cloud or by the software.
trckable.com and the docs#
The website and the documentation are static pages. They load no fonts or images from anyone else.
The pages of trckable.com count their own visits with trckable Cloud, the service you would use yourself. A count holds the page, where the visit came from, and the browser, device and country. It never holds an IP address. For this the site sets one first-party cookie, trckable_vid, a random id that recognises a returning browser for up to 400 days, and keeps a small queue of unsent page views in local storage (trckable_q) for up to 30 minutes. The documentation at docs.trckable.com runs no analytics.
The billing page, /billing/, also loads Paddle's script (cdn.paddle.com), which handles card payments. Paddle receives what your browser sends to any site, such as your IP address, and what you enter at checkout. No other page loads a script from another company.
The one thing kept in your browser is your choice of light or dark theme. It sits in local storage and never leaves your device.
The site is served by Cloudflare. Like any web host, Cloudflare receives your IP address and browser details, to deliver the pages and to protect the site from attacks. We do not keep or read those logs.
trckable Cloud#
| What | Why | How long |
|---|---|---|
| Your email address and name, and your picture if you sign in with Google | To sign you in and show who is signed in. To send the emails you ask for (sign-in links, alerts, reports, receipts) and the ones about your account (the trial ending, a plan change) | While your account exists. An account whose trial, or cancelled plan, ended without a new plan is deleted 30 days later, after emails at each step |
| Your sites and settings, your team and the keys you create | To run the service you asked for | While your account exists |
| The analytics your sites collect | To show you your reports. We handle it only on your instructions | While your account exists. You can delete a site's data at any time |
| Your plan, invoices and event counts | To bill you correctly and keep accounting records | As long as tax law requires |
| Our log of what our staff did to an account, with its address | To keep a record of who did what, for security and to settle disputes (our legitimate interest) | 24 months. Then the address is removed from the entry; the record of the action stays, under an account number |
| Paddle's payment notifications about you, which carry your name and billing address | To keep accounting records and settle disputes about a payment (our legitimate interest) | While your account exists. After you delete it, 24 months, then your name and address are removed from them |
| Emails you send to support@ or legal@, and our replies | To answer you and keep a record of what we agreed (our legitimate interest) | As long as needed to deal with your request and for our records. Write to legal@trckable.com and we delete them |
| A one-way fingerprint of your email address, which cannot be turned back into the address | To give one trial per address (our legitimate interest) | It stays after you delete your account |
| Sign-in sessions | To keep you signed in | Up to 30 days, or until you sign out |
Our order process is conducted by our online reseller Paddle.com. Paddle is the Merchant of Record for all our orders. Card details go straight to Paddle, and we never see or store your card number.
When you delete your account, your account, its sites, their analytics and your team's access are deleted 30 days after you ask, and you can restore it until then (or at once, if you email us), and they disappear from our backups as these are replaced, within 30 days of that. What the table above says we keep for longer stays for the time given there: our records of payments, the log of what our staff did, the emails you sent us, and the fingerprint. Before you delete your account, email support@trckable.com and we send your whole account as one file within 7 days.
We use your data only to run Cloud, to bill you and to write to you about your account. We do not sell it, share it for advertising, or use it to train AI models.
Signing in with Google#
If you choose to sign in with Google, we ask Google for three things only: your email address, your name and your profile picture (the openid, email and profile scopes). We use them to create your account, sign you in and show who is signed in.
We ask for no access to your Gmail, Drive, contacts or anything else in your Google account.
trckable's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell this information, use it for advertising, or let people read it, except with your permission, for security, or where the law requires it.
You can remove trckable's access at any time in your Google account settings. Your trckable account stays, and you can still sign in with an email link.
Visitors of sites that use trckable#
If you visited a site that uses trckable, that site's owner decides what is measured, and they are the ones responsible for it. We process that data only for them (on Cloud), or never see it at all (when they host trckable themselves).
What is recorded: the pages viewed, where the visit came from, the browser, operating system, device type, screen width, language and country, how long the page was in view, and the events the site chose to count.
Your IP address is used for a moment to work out the country, then thrown away. It is never stored.
What is kept in your browser depends on the site's settings:
- either nothing at all;
- or a first-party cookie (
trckable_vid) with a random id that recognises a returning browser, plus a small queue in local storage (trckable_q) that keeps unsent page views for up to 30 minutes.
If the site uses trckable's own cookie bar, your answer is kept in local storage (trckable_c) so you are not asked again. The privacy docs explain each mode in detail.
To have your data removed, ask the site's owner: trckable gives them a tool to find and erase it.
The software you run yourself#
A self-hosted trckable sends nothing to us: no usage statistics, no error reports. The data stays on your server. On its own, the server contacts only:
- db-ip.com, once a month, to download the free country database used to turn an IP address into a country;
- the European Central Bank, for exchange rates, when payments arrive in more than one currency.
It contacts payment providers, Google Search Console, a mail server, your alert webhooks or your S3 backup bucket only if you set them up.
To tell you when a new version is out, the dashboard in your own browser looks at GitHub's public list of trckable releases, at most once a day. The request carries nothing about your instance: no version, no id, no cookie. Turn it off for everyone with TRCKABLE_UPDATE_CHECK=off, or in your browser from Account.
Who else handles data#
Everything trckable Cloud keeps is stored in the EU: its servers run in Amsterdam, the Netherlands, and its backups stay in the EU. "Based in" below is where each company is registered.
| Company | For | Data | Based in |
|---|---|---|---|
| Railway | Hosting: running trckable Cloud, on servers in Amsterdam (EU) | Everything Cloud keeps (above) | United States |
| Cloudflare | Serving trckable.com and the docs, passing on the traffic to Cloud, and storing Cloud's backups in the EU | Requests to the sites, and the backup files, which are encrypted | United States |
| Resend | Sending and receiving Cloud's emails | Your email address and the email's contents | United States |
| Paddle (Paddle.com Market Limited; in the United States and Canada, Paddle's company there), as Merchant of Record | Checkout, invoices and tax | Your name, email address, billing address and payment details. Paddle's privacy notice covers what it does with them | United Kingdom |
| OpenAI | Answering questions in Peek, only when you use it | Your question and the report figures needed to answer it. Not used to train models | United States |
| Sign-in with Google, only if you choose it | Your Google email address, name and picture | United States |
Some of these companies are based in the United States. Where data leaves the European Economic Area, the transfer is covered by the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.
For the analytics your sites collect, these companies (except Paddle and Google) are our sub-processors. Our data processing agreement says how we handle that data as your processor.
Your rights#
You can ask us to:
- give you a copy of the data we hold about you;
- correct it, delete it, or let you take it with you;
- object to how we use it.
Write to the data protection address below and we will answer within 30 days. You can also complain to your data protection authority.
Who we are#
trckable.com and trckable Cloud are provided by Trckable, registration code (NIPT) M31812005D, Rr. Kristaq Prifti, Tirana, Albania. We are the controller for Cloud account data, and the processor for the analytics your sites collect. The legal notice has the details.
Data protection, and any request about your data: legal@trckable.com. Everything else: support@trckable.com. Security issues go through GitHub's private reporting.
If this policy changes in a way that matters, Cloud customers hear about it by email at least 30 days before it applies.