1. General Information
This privacy policy informs you about the collection and processing of personal data when using the Trackbee browser extension or visiting our website (trackbee.co).
Controller:
Trackbee.co - Krystian Chodak Untenehmung
Beim Kloster Dohren 75, 21614 Buxtehude
Germany
Email: datenschutz@trackbee.co
As a sole proprietorship, we are not required to appoint a Data Protection Officer. For any inquiries regarding data protection, please contact us at the address provided above.
2. Your Rights
Under the GDPR, you have the following rights:
- Right to access (Art. 15),
- Right to rectification (Art. 16) or erasure (Art. 17),
- Right to restriction of processing (Art. 18),
- Right to object to processing (Art. 21),
- Right to data portability (Art. 20).
You also have the right to lodge a complaint with a data protection authority (e.g., LfD Niedersachsen) regarding our processing of your data.
3. Data Collection on our Website
When visiting our website for informational purposes, we collect standard server logs (IP address, timestamp, browser type). This data is technically necessary for the security and stability of our website (Basis: Art. 6(1)(f) GDPR).
4. Plausible Analytics
We use a self-hosted instance of Plausible Analytics in Germany. Plausible does not use cookies and does not store personal data in the terminal equipment of your device. It provides aggregate metrics to help us optimize our website. (Basis: Art. 6(1)(f) GDPR).
5. Extension Usage (Purposes and Data Categories)
Price Tracking Services: To provide the core price monitoring functionality, we generate a pseudonymous UUID upon installation and store it locally on your device. We collect and process the product URLs that you specifically select for price monitoring, alongside their historical price values. This processing is necessary to perform our service contract (Basis: Art. 6(1)(b) GDPR).
Account Registration & Security: When registering an account, we collect and process your email address and a hashed representation of your password (secured via one-way cryptographic hashing through Supabase Auth). This data is used to secure your account, authenticate your login sessions, and deliver automated price change alerts. You maintain the right and the technical capability to modify, update, or reset your email address and password at any time. We use Brevo (France) as an EU-based sub-processor to send these transactional emails (Basis: Art. 6(1)(b) GDPR).
Push Notifications: If you opt-in to browser-based push notifications, we process your device token. Device tokens that are inactive for 30 consecutive days are automatically deleted (Basis: Art. 6(1)(b) GDPR).