Privacy at Tracker

The information we handle

Your account gives you access to a workspace. Tracker handles account and membership details, the Stories and other content you and your team add, and the messages you send us for support. We also handle technical information needed to run and protect the service. The exact fields and retention periods for each category are under review.

Your organisation controls the work it adds to its workspace. It decides who can join and what they can see. Tuinstra.DEV handles that workspace content to provide the hosted service. We also handle account, support and security information for our own service operations. The legal role for each use and the customer data-processing terms still need approval.

Why we handle it

We use account and membership information to give the right people access. We use workspace content to provide the planning and delivery features your team chooses to use. We use support messages to answer you and technical records to keep the service working and investigate problems.

Tracker uses Sentry Cloud at Sentry.io for error monitoring and a self-hosted Umami instance on a Hetzner server for analytics. Tracker uses Auth0 for sign-in. Tuinstra.DEV Notify, also hosted on a Hetzner server, participates in some account-related flows. The exact division between Notify and Auth0, and the data each service receives, still needs verification.

Website analytics and your choice

On this public website, optional Umami analytics starts only after you allow it in Cookie preferences. You can reopen those preferences from the footer and change your choice. We store the choice in your browser for this website. If browser storage is unavailable, the dialog explains that the choice applies only to the current visit.

When enabled, website analytics measures the homepage and selected links to the app. It excludes query strings, fragments and referrers. A preview without analytics configured does not offer an analytics switch. These website preferences do not control error monitoring or account features inside the Tracker application.

Providers and location

Tracker's main application server runs on Hetzner infrastructure in Nuremberg, Germany. Umami runs on Hetzner infrastructure in Germany. Auth0 uses its EU region. Notify also runs on Hetzner; its server location still needs confirmation. Tuinstra.DEV keeps backups on locally managed storage.

The Tracker project in Sentry uses its EU data-storage region in Frankfurt, Germany. Sentry documents that some account and organisation metadata can still be stored in the United States. Backup country, retention settings and the complete transfer arrangements still need confirmation. We will list verified locations and any transfers outside the European Economic Area in the approved notice.

Keeping and deleting data

Tracker currently uses Sentry's Developer plan. Sentry documents 30-day event retention for that plan; its organisation audit logs have no fixed retention limit. These are different data categories. We still need to confirm retention for Umami, backups and the other service records.

An organisation owner can request closure of a Tracker Organisation. Closing a shared workspace differs from deleting one person's account. For account deletion or a request about your personal data, email marcel@tuinstra.dev. We may need to verify that the request concerns your account. We will explain which records your organisation controls and whether a legal or security reason affects a requested deletion.

Your rights

Depending on your circumstances, you can ask to see, correct, erase, restrict or receive your personal data, or object to some uses. Email marcel@tuinstra.dev to make a request. If the request concerns your organisation's workspace content, we may need to work with that organisation. You can also complain to a data-protection authority.