Last updated: 17 September 2026 · Effective: 17 September 2026
This policy explains what personal information Trackly (“we”, “us”, “the Service”) collects at inst.trackly.one, why we collect it, who we give it to, and the choices you have. It is written to meet the notice requirements of the California Consumer Privacy Act as amended by the CPRA, and of the comparable consumer privacy laws now in force in Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Florida, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky and Rhode Island.
Notice at collection — the short version. We collect your email address, a hashed password, your IP address, and a log of what you do inside the product. We use it to run your account, take payment, and keep the Service secure. We do not sell your personal information. We do share the fact of your visit with Meta, through the Meta pixel, so we can measure our advertising, and with Yandex and Google, through Yandex Metrica and Google Analytics, so we can measure how the site is used — Metrica includes a session recorder. Section 4 explains what is sent and how to stop all three. We keep your data for as long as your account exists. You can ask us to show it to you, correct it, or delete it at any time by writing to pravdalife777@gmail.com.
The Service is operated by Individual Entrepreneur Pavel Yuryevich Krylov, taxpayer number (INN) 360104857565, state registration number (OGRNIP) 319366800073612, registered at Office 9, Room 39n, 10 Pushkinskaya Street, Saint Petersburg 191040, Russia. We are the business responsible for the personal information described here — the “controller” in the language of the state privacy laws.
Contact us at pravdalife777@gmail.com or on Telegram at @trackly_support.
The table uses the categories of personal information named in California Civil Code § 1798.140(v).
| Category | What that means here | Why we have it | How long we keep it |
|---|---|---|---|
| Identifiers | Your email address; the account number we assign you; your IP address | To create and sign you into your account, to send you service messages, to enforce rate limits and stop abuse | While your account exists, then up to 90 days in backups |
| Account credentials | Your password, stored only as a one-way hash. We never see or store the password itself | To authenticate you | While your account exists |
| Commercial information | Whether you have a Pro subscription, when it started and expires, the identifier and status of each payment, and the amount | To give you the access you paid for and to meet tax and accounting obligations | Payment records for as long as the law requires us to keep them |
| Internet activity | An event log of actions inside the product — signing up, signing in, opening the payment form, clicking Apply — with a timestamp and IP address | To operate the Service, to investigate problems and fraud, and to see which features are used | 12 months |
| Preferences | The niche, source platforms and budget range you pick in the dashboard | To show you the feed you chose, and to remember it next time | While your account exists |
We disclose personal information only to the service providers we need to run the business, and only for that purpose. Each of them is contractually barred from using it for their own ends.
| Who | What they get | Why |
|---|---|---|
| OVH SAS (hosting) | Everything stored by the Service, on servers in France | They run the server the Service lives on |
| Our payment provider | Your email address, the order identifier and the amount | To take payment and to process refunds and chargebacks |
| Telegram | A short notice that an account was created or a payment happened | Operational alerts to the owner |
| Yandex | Pages you open, the address you came from, your IP address, browser and device details, and a recording of your mouse, scrolling and clicks on the page (Webvisor); form fields are masked | To see how the site is used and where it breaks. Runs on every page. |
| Pages you open, the address you came from, your browser and device details, and your approximate location. No session recording. | A second, independent count of how the site is used. Runs on every page. | |
| Meta Platforms, Inc. | The fact that you opened a page, your IP address, browser and device details, and the Meta cookies already in your browser | To measure whether our advertising works and to reach people like you. The pixel runs on every page of the Service. |
We may also disclose information if the law compels us to, or to establish or defend a legal claim. If the business is ever sold or transferred, personal information may pass to the buyer, who will remain bound by this policy until you are told otherwise.
We are established in the Russian Federation and our servers are in France. If you use the Service from the United States, your personal information is transferred to and stored outside the United States. By using the Service you understand that this transfer takes place.
We do not sell personal information. We have never taken money for it and we do not intend to. We have not disclosed the personal information of any consumer we know to be under 16.
We do, however, advertise. Our pages carry the Meta pixel — a small script from Meta Platforms, Inc., the company behind Facebook and Instagram. It loads when the page loads, on the public pages and in your signed-in dashboard alike. It tells Meta that a browser opened one of our pages, and it reads the Meta cookies already stored in your browser. We use it to see whether our advertising brings people who actually sign up. Under California law this counts as sharing personal information for cross-context behavioral advertising, so we say so plainly here rather than hiding it behind the word “analytics”.
What we report through it: that a page was viewed, that an account was created, and that a subscription was taken. What we never send: your email address, your password, or the contents of your feed.
How to stop it. We do not currently show a consent banner, so the pixel is on by default. You can switch it off yourself, and any of these works:
We also run Yandex Metrica (counter 112428127) on every page. It is analytics, not advertising: it tells us which pages people open, where they leave and what breaks. Session recording — Webvisor — is switched on, which means a visit can be replayed like a video, including mouse movement, scrolling and clicks. Typing is not: both form fields, email and password, are marked so that Yandex stores asterisks in place of the characters, and the parts of the page that display your address back to you are excluded from the recording. A replay tells us that a form was filled, not what was in it.
You can stop it the same three ways: a content blocker, Yandex’s own opt-out page, or by writing to us. What Yandex does with the data is governed by its own privacy policy.
We also run Google Analytics 4 (measurement ID G-X3SDLHML3T) on every page. It
tells us which pages get opened, where people arrive from and where they leave. There is no session
recording in it. Your IP address is used to derive an approximate location and is not stored by
Google Analytics, and we have not enabled Google Signals, so your visit is not being joined to a
signed-in Google account for our benefit.
You can stop it with a content blocker, with Google’s own opt-out add-on, or by writing to us. What Google does with the data is governed by its privacy policy.
A switch on the site itself is planned for all three tools, so that this stops depending on your browser. Until it ships, this section describes how things actually stand rather than a control that does not exist yet.
What Meta then does with that data is governed by Meta’s own privacy policy, not by this one. We cannot delete data from Meta’s systems on your behalf; if you want that, use the privacy controls in your Facebook or Instagram account.
We set one cookie of our own, trackly_sid, which keeps you signed in. It is strictly
necessary, it is first-party, and it carries no advertising identifier. Two third-party tools load
alongside it: the Meta pixel, which sets _fbp and _fbc; Yandex Metrica, which
sets _ym_uid, _ym_d and related cookies and records the session; and Google
Analytics, which sets _ga and _ga_X3SDLHML3T. We run no other third-party
tag. The full detail is on the
Cookie Policy page.
Whichever state you live in, we will honour all of the following. We do not check your address first.
Write to pravdalife777@gmail.com from the email address on your account, or message @trackly_support. Sending the request from the address on the account is how we verify it is you; if you write from a different address we will ask you to confirm from the account address before we act, so that we do not hand your data to a stranger.
We answer within 45 days. If a request is complex we may take another 45 days, and we will tell you why before the first period runs out. There is no fee unless a request is manifestly unfounded or repetitive, and we will say so before charging anything.
An authorized agent may act for you if they send us your written, signed permission; we may still ask you to confirm directly.
You may appeal any refusal by replying to our answer with the word “appeal”. We will review it and give you a written decision within 45 days, as Virginia, Colorado, Connecticut and the other appeal states require. If we still refuse, you may complain to your state Attorney General — and if you are in California, to the California Privacy Protection Agency.
California Civil Code § 1798.83 lets California residents ask once a year for a list of the personal information we disclosed to third parties for their own direct-marketing use. We disclose none, and we will confirm that in writing on request.
The Service is for adults working as freelancers. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. We have never knowingly collected personal information from a child under 13, which is the line drawn by the federal Children’s Online Privacy Protection Act. If you believe a child has given us personal information, write to pravdalife777@gmail.com and we will delete the account and its data promptly.
The site is served over HTTPS only. Passwords are stored as one-way hashes, never in readable form.
The session cookie is marked Secure, HttpOnly and SameSite=Lax.
Card data never touches our systems. No system is perfectly safe, and we do not promise that ours is; if
a breach ever affects your personal information we will notify you and the authorities as state breach-
notification law requires.
Messages about your account, your payments and your subscription are transactional and you cannot unsubscribe from them while the account is open. If we ever send promotional email, every message will carry a working unsubscribe link and our postal identity, and we will act on an unsubscribe within ten business days, as the federal CAN-SPAM Act requires.
Our legal bases are: performance of our contract with you for your account, subscription and the session cookie; legitimate interest for security, fraud prevention and service logs; and legal obligation for accounting records. You have the rights of access, rectification, erasure, restriction, portability and objection, and you may complain to your supervisory authority. Write to the same address above.
If we change this policy in a way that matters, we will change the date at the top and say so on this page before the change takes effect. If the change concerns how we use personal information we already hold, we will ask for your consent where the law requires it.
Individual Entrepreneur Pavel Yuryevich Krylov, INN 360104857565, OGRNIP 319366800073612, Office 9, Room 39n, 10 Pushkinskaya Street, Saint Petersburg 191040, Russia. Email pravdalife777@gmail.com, Telegram @trackly_support.