Privacy Policy

Who we are

Tracks is operated by Theorics. For any privacy question you can reach us at team@tracks.at. We are the controller of the personal data described below.

Information we collect

We collect only what the app needs to function:

• Account information. When you sign up we store your email address and an encrypted (hashed) password, plus an optional display name. This is handled by our authentication provider (Supabase). We use it to create your account, sign you in, and contact you about your account if needed.
• Location. Scanning the area around you is the core feature, and it needs your device’s location. When you scan, the app sends your current latitude and longitude to our backend, which converts it into a hexagonal map cell and returns the wildlife documented in that area. Your precise coordinates are used to compute the cell and are not stored alongside your identity; we keep records of the map cells that have been scanned, not a history of where individual users have been. Location is only accessed while you are using the app, never in the background. You can deny or revoke the location permission at any time in your device settings. The rest of the app still works; scanning won’t.
• Your collection. The species you collect (“Tracks”) and related counts are stored against your account so your field guide syncs across sessions.
• Public postcards. Postcards you send or save stay on your device. Only if you tap Public link and confirm do we store that one postcard: the image exactly as the app shows it (including your selfie, if you added one), the place name printed on it (a town or district, never coordinates), the species group, and your username, which is part of the link (for example tracks.at/beyoglu-ben-4821). Anyone with the link can see the postcard. We don’t list these pages anywhere, and they ask search engines not to index them. To take one down, email us or delete your account.
• Technical and diagnostic data. Like most apps, our servers log basic technical information (request timestamps, error messages, and rate-limit counters tied to your account ID) to keep the service reliable and prevent abuse. We do not use third-party advertising or cross-app tracking SDKs.

This website

Everything above describes the app. This site has no accounts and no sign-in. To understand which pages people read and where the field guide loses them, we use Microsoft Clarity, which records how visitors interact with the pages: pages viewed, clicks, scrolling, browser and screen size, and an approximate location (country or city level) derived from your IP address. Clarity masks the text content of pages by default, and we never pass it your name, email, or anything tied to your Tracks account.

There is no cookie banner here because there is nothing to consent to: Clarity runs in its no-consent mode, so it stores nothing on your device and cannot recognise you on a later visit. Each page view stands on its own. Microsoft processes this data as described in the Microsoft Privacy Statement.

How we use your data

We use the information above to: create and secure your account; show you wildlife documented near your location; save the species you collect; keep the service running and protect it from abuse; and respond when you contact us. We do not sell your personal data, and we do not use it for advertising or profiling.

Services we share data with

To run Tracks we rely on a small number of service providers, who process data only on our behalf:

• Supabase. Authentication, database, and backend hosting (servers located in the EU). Stores your account and collection data, and any public postcards.
• Mapbox. Renders the map. To draw the map for your area it receives location information from your device, subject to Mapbox’s privacy policy.
• Microsoft Clarity. Website analytics for this site only — not the app. Receives the interaction data described above, subject to the Microsoft Privacy Statement.
• iNaturalist. The source of the wildlife observations shown in the app. When you scan, we query iNaturalist for the surrounding area. The observation photos and data are contributed by the iNaturalist community under Creative Commons licensing.
• Apple / Google. App distribution and, if applicable, crash reporting provided by the platform.

We may also disclose information if required by law or to protect the rights, safety, and security of our users and service.

Data retention

We keep your account and collection data, and any public postcards, for as long as your account exists. Wildlife observations and scanned-cell records are cached to keep the app fast and to reduce load on iNaturalist; this cached data is about places and species, not about you.

Your rights and choices

You can delete your account at any time from inside the app (Settings → Delete account). This permanently removes your account and the data tied to it from our systems: your email, profile, collection, and any public postcards. Depending on where you live, you may also have the right to access, correct, or export your personal data, or to object to certain processing. Email team@tracks.at and we’ll help.

Security

Data is encrypted in transit (HTTPS) and at rest by our hosting provider. Passwords are never stored in plain text. No system is perfectly secure, but we take reasonable measures to protect your information.

Children’s privacy

Tracks is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us information, contact us and we will delete it.

Changes to this policy

If we make material changes we will update this page and the “Last updated” date above. Significant changes may also be announced in the app.

Questions about this policy? team@tracks.at