Privacy Policy

1. Who we are

TrackAIs (trackais.com) provides embeddable AI shortcut buttons for websites. References to "we", "us", or "TrackAIs" in this policy refer to the operator of trackais.com. Questions can be directed to [email protected].

2. Data collected via the widget (end visitors)

When a visitor on an embedded site clicks an AI button, TrackAIs records a click event containing:

• The AI service clicked (e.g. "claude")
• The URL and title of the page where the click occurred
• A one-way SHA-256 hash of the visitor's IP address — never the raw IP
• A one-way SHA-256 hash of the User-Agent string
• Timestamp of the click
• Whether the click was classified as bot traffic

We never store raw IP addresses. The hash is used solely for bot/duplicate detection and cannot be used to re-identify an individual. No cookies are set by the widget. No cross-site tracking occurs.

3. Data collected from site owners (registration)

When a site owner registers, we collect their email address and website URL. This is used to associate click analytics with the correct site and to contact the owner about their account. We do not share this with third parties.

4. Cookies and sessions

The TrackAIs widget sets no cookies on end visitors. Site owners who sign in to the dashboard receive a standard session cookie for authentication. This cookie is scoped to trackais.com and is not used for advertising or cross-site tracking.

5. Data retention

• Raw click events are retained for 90 days, then deleted.
• Aggregated daily totals (count per AI per page per day) are retained indefinitely and contain no personal data.
• Site owner registration data is retained for as long as the site is active.

6. Legal basis (GDPR)

For visitors in the European Economic Area, our legal basis for processing click event data is legitimate interests (Article 6(1)(f) GDPR) — specifically, providing accurate analytics to site owners and detecting bot traffic. The data collected is minimal, no raw personal data (IP addresses) is stored, and the processing is proportionate.

7. Your rights

If you are in the EEA or UK you have the right to access, correct, or request deletion of personal data we hold about you. Because we store only hashed identifiers for end visitors, we cannot identify records belonging to a specific individual without additional information you provide. Site owners can request deletion of their registration data by emailing [email protected].

8. Third-party services

The TrackAIs infrastructure runs on a VPS behind Cloudflare. Cloudflare processes request metadata in accordance with Cloudflare's Privacy Policy. No other third-party analytics, advertising, or tracking services are used.

9. Changes to this policy

We may update this policy from time to time. Material changes will be noted with an updated "Last updated" date at the top of this page. Continued use of the service after changes constitutes acceptance.

10. Contact

Privacy questions or data requests: [email protected]