tracklume

Privacy Policy

Last updated: June 2026

Tracklume is built for affiliate marketers who care about trust. We collect only the data we need to operate the service.

Data we collect

  • Account data: email, display name, optional avatar, workspace and plan.
  • Link data: the destinations, slugs, projects and routing rules you create.
  • Click data: when an end user follows a /go/ link we store the country (derived from IP — IP itself is not stored), device type, referrer and a truncated user-agent. We do not set cookies on end users.
  • Bio page subscribers: if you enable the email-capture block on a bio page, we store the email address a fan submits along with the bio page it belongs to and a timestamp. Subscribers belong to the bio page's workspace and are exportable to CSV from the page editor.
  • Bio page experiments: when you run an A/B test on a bio page, we set a small first-party cookie (tl_exp_*) on the visitor's browser to keep their variant assignment sticky across visits. The cookie holds only an opaque variant ID and expires after 30 days. We count impressions and clicks per variant — no personal data.
  • Collaboration activity log: we record when teammates and project collaborators are invited, accept, change role or are removed. Each entry stores the actor, target user, role, and a timestamp so admins can audit access.

How we use it

To operate the service, generate your analytics, alert you to broken links, send transactional emails about your account, and let you (as a bio-page owner) communicate with the fans who subscribed to your list. We never sell personal data.

Subprocessors

We use a managed Postgres database and an edge runtime for redirects. Both are operated under strict data-processing agreements.

Your rights (GDPR & CCPA)

You can access, correct, export or delete your data from Settings → Profile, or by emailing privacy@tracklume.app. We respond to data subject requests within 30 days. Bio page subscribers can unsubscribe at any time by replying to any email from the page owner or emailing the address above — the bio page owner is the data controller for their subscriber list.

Retention

Account data is kept while your account is active. Raw click events are kept for 90 days, then aggregated daily roll-ups remain. Bio page subscribers and the collaboration activity log are retained for the life of the workspace and removed on deletion. Deleting your account removes all workspace data within 30 days.