Privacy Policy
Your privacy is important to us. This policy explains what data we collect and how we use it.
1. Information We Collect
Account data: When you sign up, we collect your email address, chosen username, and a securely-hashed password. You may optionally add a real name, bio, location, and social links to your profile.
Usage data: We log page views, search queries, and clicks via server-side analytics. IP addresses are anonymized (last octet removed) and stored for 90 days.
Content: Reviews, bookmarks, alerts, direct messages, and profile content you submit.
2. How We Use Your Data
- To provide the core service (trackers, reviews, DMs, alerts)
- To detect and prevent abuse, spam, and security threats
- To send transactional emails (verification, security alerts, signup notifications)
- To generate aggregate, anonymized analytics (popular trackers, trends)
- We do not sell your data to third parties. Ever.
3. Cookies
We use first-party cookies for session management (login state) and CSRF protection. We do not use third-party advertising or tracking cookies. You can clear cookies in your browser at any time — you'll just need to log in again.
4. Data Retention
Account data is kept until you delete your account. After deletion, we remove personal data within 30 days (logs may be retained for up to 1 year for legal/security purposes).
Direct messages are stored encrypted at rest. You can delete your messages at any time.
5. Your Rights (GDPR / CCPA)
- Access — request a copy of your data
- Rectification — update inaccurate data
- Erasure — delete your account and all data
- Portability — export your data in JSON
- Object — contact us to dispute processing
Email privacy@bttrackers.com to exercise any of these rights.
6. Security
We use HTTPS everywhere, bcrypt for passwords, CSRF tokens on all forms, and security headers (CSP, HSTS, X-Frame-Options). We monitor for suspicious activity and will notify you of any breach affecting your data within 72 hours.
7. Third-Party Services
- Chart.js (CDN, no tracking) — for analytics charts
- Google Fonts (CDN, IP logged) — typography
- Mailgun / SMTP — transactional email delivery (when configured)
8. Changes to This Policy
We will notify users via email and in-app banner at least 30 days before any material change. Continued use after the effective date constitutes acceptance.
9. Contact
Questions? Email privacy@bttrackers.com or open a ticket via the in-app help system.