Privacy Policy
Toby's Web Tracker ("we," "us," or "our") is operated by Toby's Webworks, LLC. This Privacy Policy explains what information we collect, how we use it, and your rights regarding it when you use our website tracking and analytics service (the "Service").
1. Information We Collect
Account information
When you create an account we collect your name, email address, and authentication credentials (managed securely via Clerk, our identity provider).
Visitor tracking data
When you install our tracking snippet on your websites, we record the following for each page visit:
- Page URL and referrer URL
- UTM parameters (source, medium, campaign, term, content)
- Browser language and approximate geographic region (country and city derived from IP address)
- A random, session-scoped visit identifier
We do not store raw IP addresses. We do not set tracking cookies on your visitors' browsers. No personal data about your visitors is collected or retained.
Usage and log data
We collect standard server logs (request paths, response codes, timestamps) for security and debugging purposes. Logs are retained for a maximum of 30 days.
2. How We Use Your Information
- To provide and operate the Service, including displaying your analytics dashboards
- To send transactional communications (account confirmations, important service notices)
- To detect abuse, prevent fraud, and ensure the security of the Service
- To improve and develop the Service
We do not sell, rent, or share your personal information or your visitors' data with third parties for advertising or marketing purposes.
3. Data Sharing and Sub-processors
We use a limited set of trusted sub-processors to operate the Service:
- Clerk — user authentication and session management
- Replit — hosting and infrastructure
- Resend — transactional email delivery
Each sub-processor is contractually bound to process data only as instructed and to maintain appropriate security standards.
4. Data Retention
Your account data is retained for as long as your account is active. Visitor tracking data is retained indefinitely to support historical analytics. You may request deletion of your data at any time by contacting us.
5. Your Rights
Depending on your jurisdiction you may have the right to access, correct, delete, or export your personal data. To exercise any of these rights, please contact us at the address below. We will respond within 30 days.
6. Cookies
We use a strictly necessary session cookie to keep you signed in to your account. We do not use advertising or analytics cookies on this website. The tracking snippet you install on your own sites does not set any cookies on your visitors.
7. Security
We use industry-standard measures including TLS encryption in transit, access controls, and regular security reviews to protect your data. No system is perfectly secure — if you discover a vulnerability, please disclose it responsibly by contacting us.
8. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice in the Service at least 14 days before they take effect. Continued use of the Service after a change takes effect constitutes acceptance.
9. Contact
Questions about this policy? Email us at info@tobyswebworks.com or visit our contact page.