Privacy Policy
What data YoTrackr collects, how it's stored, and your rights over your subscription and domain data.
Overview
YoTrackr ("we", "our", "the app") is a cloud-based subscription, domain, and digital-asset tracking service operated by Tarun Prasad (trading as YoTrackr), Bhubaneswar, Odisha, India (the "data controller" for your account data). This policy explains what information we collect, how it is stored, and the choices you have. Everything you track (your subscriptions, domains, renewal dates, costs, and notes) is stored on our servers, tied to your account, so it is available on all your devices and so we can send your renewal reminders. Your browser also keeps a local cache of the same data and your display preferences.
Information We Collect
Account information
To create an account we collect your email address and a password (stored as a salted bcrypt hash — we never store or can see your plain-text password). You may optionally provide a display name.
Your tracked data (subscriptions, domains, assets)
The subscriptions, domains, hosting plans, wishlist items, and other things you add are stored in our database (PostgreSQL) on our server, tied to your account. This can include costs, billing dates, and notes you type in, so please do not enter passwords, card numbers, or other secrets in notes. If you use the optional Google Drive or Dropbox backup, a copy of your data (a plain JSON file, not encrypted by us) is uploaded to your own Google Drive or Dropbox account, which we do not have access to. We also keep your reminder settings and, when you contact support, your support messages. We log the emails we send you (type, time, delivery status) so we can troubleshoot delivery.
License and billing information
If you purchase YoTrackr through AppSumo, your payment is handled entirely by AppSumo — we never receive or store your card details. We only receive a license code, which we use to activate your account at the tier you purchased. If you buy directly from us, payment is processed by our payment provider (Razorpay); we receive confirmation of the payment, the plan, and billing details such as name, email, and country, but never your full card number.
Technical data
Our servers keep standard technical logs (such as IP address, browser type, and request time) for security, abuse prevention, and debugging. For account security we also keep, for each device you sign in on, its name, browser and operating system, and the IP address of its first and latest sign-in, so you can recognise your devices and we can tell you about a sign-in from a new one. This record is deleted with your account. Error reports sent to Sentry may include technical details of the failing request.
What We Don't Collect
The YoTrackr web app (app.yotrackr.com) contains no advertising or analytics tracking scripts. The marketing website (yotrackr.com) uses cookie-free analytics (Umami) to count visits and see which pages are read, and, only if you click Accept on the consent banner, Google Analytics, which uses cookies. Declining changes nothing about how the site works. We do not sell your personal information, and we do not share it with advertisers. We use Sentry to record technical errors on our servers so we can fix them.
Third-Party Services We Use
- WHOIS / RDAP lookups — when you add a domain, we query public domain-registry data (via RDAP) to auto-fill its expiry date and registrar. No personal data is sent in this request beyond the domain name itself.
- Currency exchange rates — to convert costs between currencies for display, we query a third-party exchange-rate API. No personal data is included in this request.
- AppSumo — if you purchase via AppSumo, their own privacy policy governs the payment step of that transaction.
- Razorpay — processes payments for direct purchases, under its own privacy policy.
- ZeptoMail (Zoho) — account emails (welcome, password reset, license, renewal and trial reminders) are sent through ZeptoMail, which receives your email address and the message.
- Sentry — error monitoring for our servers.
- Hosting — our servers run on a virtual private server from OVH, managed by us.
- Google Drive / Dropbox backup (optional) — only if you explicitly connect one of these for backups, using your own API credentials.
Data Security
Account passwords are hashed with bcrypt. Data in transit between your browser and our servers is sent over HTTPS. No online service can promise perfect security, so please use a strong, unique password. If a breach affecting your personal data occurs, we will notify affected users and the relevant authorities as the law requires.
International Data Transfers
We are based in India and our servers may be located outside your country. By using YoTrackr you understand that your data is processed in India and in the countries where our service providers operate. Where the law requires it (for example for users in the EU or UK), we rely on appropriate safeguards such as Standard Contractual Clauses with our providers.
Legal Bases (EU/UK users)
We process your data to perform our contract with you (running your account and sending reminders), for our legitimate interests (security, abuse prevention, fixing errors, improving the service), to comply with legal obligations (such as tax records), and on the basis of your consent where we ask for it (such as optional analytics cookies, which you can withdraw at any time).
Your Rights and Controls
- Export — you can download everything we store for your account as a JSON file from Settings → Data → Account, and export your items to CSV/PDF/Excel from within the app.
- Delete — Settings → Data → Account → Delete permanently deletes your account, your synced items, API keys, support messages, and reminder history. Paid license records are kept as purchase records (with your account removed from them); email delivery logs are removed within 30 days. "Wipe All Data" removes what is stored in your browser. You can also email us and we will delete your account manually.
- Access and correction — you can change your email and password from within the app, and download your data at any time (see Export).
- Other rights — depending on where you live (for example under the GDPR, UK GDPR, CCPA/CPRA, or India's DPDP Act), you may also have the right to object to or restrict processing, to data portability, and to withdraw consent. Email us to exercise any of them; we reply within 30 days. You can also complain to your local data protection authority.
- California — we do not sell or share personal information as those terms are defined in the CCPA/CPRA.
Children's Privacy
YoTrackr is not directed at children under 16, and we do not knowingly collect data from them. If you believe a child has given us personal data, email us and we will delete it.
Changes to This Policy
If we make material changes to this policy, we'll update the "Last updated" date above and, where appropriate, notify active users in-app.
Contact
Questions about this policy or your data? Email us at [email protected]. Our Grievance Officer under India's IT Rules and DPDP Act is Tarun Prasad, reachable at [email protected].