Last updated: 4 September 2026.
1. Data controller
Personal data collected on track-history.com and app.track-history.com is processed by:
Mikael Bernard — EI, 24 rue de la Perrière, 70600 Champlitte, France
Email address: customer@track-history.com
No data protection officer has been appointed, as the appointment is not mandatory given the nature and volume of the processing carried out.
2. Data collected
The following categories of data are collected:
- Account data: email address, country, language and, if you fill them in, first name, last name, date of birth, display name and profile picture.
- Billing data: customer type, company name, postal address, postcode, city, country and intra-community VAT number where applicable. This data is required to place an order, as a compliant invoice cannot be issued without it.
- Content you enter: events, groups, categories, values, descriptions and uploaded files.
- Technical data: IP address, connection information, error and security logs, and the payer country reported by the payment provider.
- Contact data: email address and message content when you use the contact form.
- Audience measurement: a randomly generated visitor identifier stored in your browser's local storage, associated where applicable with the campaign source (utm_source parameter) and the promotional code used.
3. Purposes, legal bases and retention periods
Each processing operation serves a defined purpose and rests on a legal basis within the meaning of article 6 GDPR:
| Purpose | Legal basis | Retention period |
|---|---|---|
| Creating and managing the account, providing the services | Performance of the contract (art. 6.1.b) | Lifetime of the account, then one month after the deletion request |
| Processing orders, invoicing and accounting | Legal obligation (art. 6.1.c) | Ten years from the close of the financial year (art. L123-22 of the French commercial code) |
| Answering contact requests and providing support | Legitimate interest (art. 6.1.f) | Three years from the last exchange |
| Platform security, error and abuse detection | Legitimate interest (art. 6.1.f) | Twelve months at most |
| Audience measurement and sign-up attribution | Legitimate interest (art. 6.1.f) | Twenty-five months at most |
4. Recipients and processors
Your data is never sold, rented or transferred to third parties for advertising purposes. It is accessible to the publisher and to the following technical providers, which act as processors and solely for the needs of the service:
| Provider | Role | Hosting |
|---|---|---|
| PayPal (Europe) S.à r.l. et Cie, S.C.A. | Payment processing. The Customer's name, email address and billing address are sent to it to prefill the payment page and, where the Customer asked for automatic renewal, to hold the corresponding recurring mandate. The provider alone collects payment details; the publisher only receives the status and reference of the transaction and the payer's country. | European Union |
| Functional Software, Inc. (Sentry) | Collection of application error reports so that faults can be fixed and the service kept secure. Strictly necessary for its operation; may include the IP address and the identifier of the account concerned, never the content entered. | United States |
| Google Ireland Ltd (reCAPTCHA) | Protection of the contact form against automated submissions. Only loaded if you enable it on the contact page. | United States |
| Google Ireland Ltd (Google Sign-In) | Sign-in with a Google account, only if you choose that sign-in method. The publisher only receives the email address, first name and last name of the account. | United States |
| OVH SAS | Hosting of the servers and databases. | European Union |
Data may also be disclosed to administrative or judicial authorities where the law requires it.
The content you enter in the application is only accessed by the publisher at your request, as part of support, or where the law requires it.
5. Transfers outside the European Union
The providers Sentry, Google reCAPTCHA and Google Sign-In may process data in the United States. These transfers are framed by the European Commission's standard contractual clauses and, where applicable, by those providers' certification under the EU–US Data Privacy Framework. You can obtain a copy of the safeguards in place by writing to the address given above.
6. Cookies and trackers
The site uses no advertising cookies and no third-party tracking cookies. The following trackers are used:
- Local storage on app.track-history.com: keeps your session token so you stay signed in. Strictly necessary for the service to work.
- Indexed database on app.track-history.com: stores data entered in local mode. That data stays on your device and is never sent to the publisher.
- Visitor identifier in local storage: audience measurement and attribution of sign-ups to a campaign source. This identifier is not shared with third parties and allows no cross-site tracking.
- Google reCAPTCHA on the contact page: sets Google's own trackers in order to tell a human from a robot. The script is only loaded, and those trackers only set, after you click the button enabling anti-spam protection.
- Google Sign-In on the sign-in screen: Google's script is only loaded, and its trackers only set, after you click "Continue with Google".
- Sentry error reports: no cookie is set; only the application's error reports are sent, with no browsing tracking and no performance measurement.
You can erase these items at any time from your browser settings. Clearing local storage signs you out of the application and deletes data entered in local mode on that device.
7. Security
Exchanges with the platform are encrypted in transit using TLS. Account access is protected by authentication tokens, and passwords are never stored in clear text.
Access to the databases is restricted and logged. In the event of a data breach likely to result in a high risk to your rights and freedoms, you would be informed under article 34 GDPR.
8. Your rights
You have the following rights over your personal data:
- right of access: to obtain confirmation that your data is processed and to receive a copy of it;
- right to rectification: to have inaccurate or incomplete data corrected;
- right to erasure: to have your data deleted, subject to legal retention obligations, in particular accounting ones;
- right to restriction of processing;
- right to portability: to receive your data in a structured, machine-readable format. The application lets you export your content directly in CSV and JSON;
- right to object, on grounds relating to your particular situation, to processing based on legitimate interest;
- right to give directions on what happens to your data after your death.
These rights are exercised by writing to customer@track-history.com. You will receive a reply within one month, extendable by two months for a complex request. Proof of identity may be requested where there is reasonable doubt as to who you are.
If you consider that the processing of your data breaches the GDPR, you may lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or at cnil.fr.
Account Deletion
To delete your account yourself, follow these steps:
- Log in to https://app.track-history.com
- Open the menu (button at the top right)
- Click on 'User Settings'
- In the 'Account' tab, click on the 'Request account deletion' button
- If you are sure, click 'Yes' in the confirmation window that appears.
- You then have one month to change your mind and cancel the account deletion, after which your data will be permanently deleted.
Invoices and accounting records linked to your account are kept beyond that deletion, for the period required by law. They contain only the mandatory invoicing information.
10. Automated decision-making
No decision producing legal effects concerning you is taken solely on the basis of automated processing, and no profiling is carried out.
Changes to this Policy
We may update this privacy policy from time to time. Any significant changes will be communicated to users via the website.
Contact Information
If you have any questions or concerns regarding this privacy policy, please contact us at: customer@track-history.com