Privacy

Last updated October 2026.

Who we are

Trakiie is run by [Legal name of the business], [Postal address]. Questions about privacy go to hello@trakiie.app.

Trakiie plays two roles. For your account, we decide what we keep and why. For the visitors and buyers of your sites, you decide, and we process their data for you to run the service.

Your account

• Your email address, to sign you in with a one-time link and send account emails.
• Sign-in sessions, stored only as one-way hashes. A session lasts 30 days; a sign-in link works once, for 15 minutes.
• Your plan and billing status, which Dodo Payments sends us. We never see or store card numbers.
• Personal tokens for the CLI and the MCP server, stored only as one-way hashes, plus when each was last used.
• The questions you track, the AI answers to them, and your notes and settings.

The free check on our site

We keep the domain and topic you enter, the question we asked, and the answer. If you give your email for a second check, we keep that too. To limit runs we keep a hash of your IP address and browser that changes every day; the IP address itself isn't stored.

Visitors to your sites

The tracking script you add to your site sends us:

• The page address and the referring site, with campaign tags (UTM) and ad click ids if the link had them.
• Country, region and city, and a location rounded to about 10 km, all worked out from the IP address by our host.
• Browser, operating system, device type, screen size, language and time zone.
• The goals you choose to send, with the fields you add to them.
• A random visitor id and a session id, kept in first-party cookies on your own domain (trk_vid, trk_first and trk_n for a year, trk_sid for 30 minutes).

IP addresses are never stored. They are only mixed with a secret and the date into a hash that ties one person's visits together for that day. The script skips known bots, pages inside frames, and local development. You can turn it off in your own browser by setting trk_ignore to true in local storage.

Because the script sets cookies on your domain, your own privacy notice should mention Trakiie, and you are responsible for any consent your visitors' laws require.

AI crawlers

The server snippet reports requests from AI bots: which bot, the page path, the response status and the country. These are bots, not people.

Your sales

When you connect your payment provider (Stripe, Dodo Payments, Lemon Squeezy, Polar or Paddle), its webhook sends us each payment's id, amount, currency, product, and the buyer's email and name where the provider includes them. We use them to tie sales and abandoned checkouts to the visits and sources that led to them, and show them only to you.

Who helps us run Trakiie

• Cloudflare hosts the app and database, and runs the human check on our forms (Turnstile).
• Dodo Payments handles subscriptions and payments as the merchant of record.
• Resend delivers our emails.
• Anthropic and OpenRouter run the AI checks. They receive the questions you track and the public pages of your site, never your visitors' data.

We don't sell data, show ads, or train AI models on your data.

How long we keep it

Account data stays while you have an account. When a plan ends, your sites' data (visits, AI reads, sales, checks and notes) is deleted 30 days later. Email us to delete your account sooner, or to get a copy of what we hold about you. Paid plans can export visits as CSV at any time.

Cookies on trakiie.app

One cookie, sid, keeps you signed in. A second, dev, lasts 15 minutes while you approve a CLI sign-in. Our own site runs no analytics or advertising cookies. Turnstile may set cookies it needs to tell people from bots.

Visitors of a Trakiie customer's site

If you visited a site that uses Trakiie and want your data seen or deleted, ask that site's owner. They control it, and we act on their request.

Changes

If this page changes in a way that matters, we'll email account holders before it takes effect.