1. Who we are
strackt is operated by Madonie Holding, registered in the Netherlands. When this policy mentions "strackt," "we," "us," or "our," it refers to Madonie Holding as the data controller responsible for your personal data.
For any privacy-related questions, contact us at [email protected].
2. What we collect
We collect different types of data depending on how you interact with us:
Information you provide
- Waitlist & newsletter — your email address when you sign up for the waitlist or subscribe to The Log.
- Account data — name, email address, and billing information when you create an account on the strackt platform.
- Support & feedback — any information you share when contacting us through Featurebase or email.
Information collected automatically
- Analytics — we use Umami, a privacy-focused analytics tool. Umami does not use cookies, does not collect personal data, and does not track you across websites. All data is aggregated and anonymous.
- Sign-up source — if you follow a link from this site to create an account, the link carries how you first reached us in this browser tab: the campaign tag on the link you arrived through (for example
utm_source=reddit), the domain of the site that referred you, and the first page you landed on. Your browser keeps it in session storage until the tab closes. If you then sign up, we store it with your account so we can see which channels bring people who stay. It is never shared or sold. - Server logs — standard web server logs including IP addresses, browser type, and pages visited. These are retained for a limited period for security and debugging purposes.
Information from third parties
- Payment data — billing and payment information is processed by Paddle, our merchant of record. We do not store your credit card details.
3. Why we collect it
We process your data for the following purposes:
| Purpose | Legal basis (GDPR) |
|---|---|
| Providing and operating the strackt platform | Contract performance |
| Sending waitlist updates and newsletters | Your consent |
| Processing payments via Paddle | Contract performance |
| Loading Paddle's script so a failed payment can be recovered | Legitimate interest |
| Responding to support requests and feedback via Featurebase | Legitimate interest |
| Sending transactional emails via Resend | Contract performance |
| Aggregated, anonymous website analytics | Legitimate interest |
| Security monitoring and abuse prevention | Legitimate interest |
5. How long we keep it
- Account data — retained while your account is active, deleted within 30 days of account deletion.
- Waitlist & newsletter — retained until you unsubscribe.
- Server logs — retained for up to 90 days.
- Payment records — retained as required by tax and accounting law (typically 7 years).
- Support conversations — retained for up to 12 months after resolution.
7. Your rights
Under the GDPR, you have the following rights:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate or incomplete data.
- Erasure — ask us to delete your personal data ("right to be forgotten").
- Restriction — ask us to limit how we process your data.
- Portability — request your data in a structured, machine-readable format.
- Objection — object to processing based on legitimate interest.
- Withdraw consent — unsubscribe from the newsletter at any time via the link in every email.
To exercise any of these rights, email [email protected]. We respond within 30 days.
You also have the right to lodge a complaint with a supervisory authority. In the Netherlands, this is the Autoriteit Persoonsgegevens.
8. Data security
We take appropriate technical and organizational measures to protect your data. All connections are encrypted via TLS. Access to personal data is restricted to those who need it to operate the service.
9. International data transfers
Some of our processors operate outside the EU/EEA. Where data is transferred internationally, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses or adequacy decisions) to protect your data in accordance with the GDPR.
10. Changes to this policy
We may update this privacy policy from time to time. When we make significant changes, we will notify you via email or a notice on our website. The "last updated" date at the top of this page reflects the most recent revision.