Privacy policy

Data controller

Henri Delozanne, sole trader, 116 rue Jeanne Maillotte, 59110 La Madeleine, France. Contact: contact@trackboard.eu.

Data processed

• Account: email address, username and password, stored hashed.
• Content: tracks, releases, audio files, notes, comments and checklists.
• Collaboration: shared tracks, invitations sent and received.
• Subscription: status, plan and dates of your Pro subscription. Your payment details are processed by Stripe and Link: Trackboard never has access to them.
• Technical data: IP address and connection information, in the server logs.
• Audience measurement, only with your consent: pages visited, referrer, device and browser type.

Purposes and legal bases

• Providing the service and managing your account: performance of the contract (the terms of use).
• Managing your Pro subscription: performance of the contract.
• Sending the emails the service needs, such as password resets: performance of the contract.
• Keeping the service secure and preventing abuse: legitimate interest.
• Measuring the site’s audience to improve it: your consent.

Recipients and providers

Your data is never sold or rented. Trackboard relies on providers that process it on its behalf:

• Hostinger (Cyprus): website hosting;
• Railway (US company): app hosting;
• Neon (database hosted in the United Kingdom): accounts and content;
• Cloudflare (US company): audio file storage;
• Resend (US company): sending emails;
• Google (US company): audience measurement with Google Analytics, only with your consent;
• Stripe and Link: subscription payments. For the transaction, Link acts as merchant of record and processes your payment details under its own privacy policy.

The members of the tracks you share see your username, your email and the content of these tracks.

Transfers outside the European Union

Some providers are based in the United States. These transfers rely on the EU–US Data Privacy Framework or on the European Commission’s standard contractual clauses. The United Kingdom benefits from an adequacy decision of the European Commission.

Retention

• Account and content: as long as your account exists. After it is deleted, they are erased within 30 days. Shared tracks stay with their other members, with the files you uploaded to them, unless you also ask for these files to be deleted.
• Password reset links: 1 hour.
• Server logs: a limited time, set by the hosting providers.
• Billing data: kept by Stripe and Link as their legal obligations require.
• Audience data: 14 months at most in Google Analytics.
• Your cookie choice: 6 months, after which you are asked again.

Cookies and local storage

Trackboard uses trackers it needs to work, which are exempt from consent:

• the trackboard_locale cookie, which remembers your language for 1 year;
• your browser’s local storage, which keeps your sign-in session, your display preferences and your progress in the public checklists.

Only with your consent, Google Analytics sets the _ga and _ga_* cookies, kept for 13 months at most, to measure the audience. You are asked on your first visit, and your choice is kept for 6 months in your browser’s local storage. You can change it at any time with the “Cookies” link at the bottom of the site’s pages: declining stops the measurement and deletes these cookies.

Your rights

You have the right to access, rectify, erase, restrict, port and object to the processing of your data. To exercise these rights, write to contact@trackboard.eu. You may also lodge a complaint with the CNIL, the French data protection authority (cnil.fr).

Security

Connections are encrypted (HTTPS), passwords are hashed, and audio files are only reachable through temporary links, reserved for the members of their tracks.

Changes

This policy may change. The date of its last update is shown at the top of this page.