Updated 3 October 2026
Trust
Who handles your data, and what happens to it if we stop.
DPA#
- Data processing agreement, no signature needed
- Signed copy: legal@trckable.com
- Provider: Trckable, Tirana, Albania (legal notice)
Sub-processors#
| Company | For | Based in |
|---|---|---|
| Railway | Hosting, servers in Amsterdam | United States |
| Cloudflare | Traffic, encrypted backups in the EU | United States |
| Resend | United States | |
| OpenAI | Peek questions, only when used | United States |
| Paddle | Payments, never your analytics | United Kingdom |
| Sign-in, only if chosen | United States |
- Railway is US-owned; Cloud runs in its Amsterdam region
- 30 days' notice before a change
- What each one sees
Security#
- Two-step sign-in for every account
- Provider keys encrypted at rest
- No visitor IP stored
- Encrypted backups, kept in the EU
- HTTPS everywhere
- Report a problem: legal@trckable.com, GitHub, security.txt
- Security page
Accessibility#
- WCAG 2.1 AA, checked with axe-core in three browsers on every change