Privacy Policy

Last updated: June 2026

This Privacy Policy explains how CodeCall Ltd (“we”, “us”, “our”) collects, uses, and protects your personal data when you use TrackLog (“the service”), available at www.tracklog.co.uk. We are the data controller for the personal data processed through the service. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. What we collect

We collect only the data we need to run TrackLog and provide your account:

  • Account information — your name and email address, managed on our behalf by our authentication provider, Clerk.
  • Game library data — the games you add, their statuses, platforms, and any notes or tags you create.
  • Session and playtime data — play sessions you log or track, completion times, and related activity used to generate your stats and insights.
  • Payment information — if you subscribe to Pro, payments are processed by Stripe. We do not store or have access to your full card details; we retain only a customer reference and subscription status.
  • Usage analytics — basic, aggregated information about how the service is used, to help us diagnose issues and improve the product.

2. How we use your data

  • To provide, maintain, and operate the service and your account.
  • To process payments and manage subscriptions (via Stripe).
  • To send transactional emails such as account verification, receipts, and important service notices.
  • To improve the product, fix bugs, and develop new features based on aggregated usage.

We do not sell your personal data, and we do not use it for third-party advertising.

3. Legal basis for processing

Under Article 6 of the UK GDPR, we rely on the following legal bases:

  • Performance of a contract — to provide the service you sign up for and to process your subscription.
  • Legitimate interests — to secure, maintain, and improve the service, provided these interests are not overridden by your rights.
  • Legal obligation — to comply with applicable law, including accounting and tax requirements.

4. Third-party data sources

TrackLog displays game data sourced from third parties. This data is not personal data but is relevant to how the service works:

  • IGDB — game metadata including titles, cover images, genres, and release information is sourced from IGDB (igdb.com), a Twitch service. TrackLog is not affiliated with IGDB or Twitch.
  • HowLongToBeat — completion time estimates are sourced from HowLongToBeat (howlongtobeat.com). These times are community-submitted and may be incomplete or approximate. TrackLog is not affiliated with or endorsed by HowLongToBeat.

5. Data storage

TrackLog is hosted on Vercel, with infrastructure located in the United States and the European Union. Our application database is held on cloud infrastructure. Authentication data is managed by Clerk, and payment data is managed by Stripe. Where data is transferred outside the UK, it is protected by appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.

6. Data retention

We keep your account data for as long as your account is active. If you request deletion of your account, we will delete your personal data within 30 days, except where we are required to retain certain records (for example, payment records) to meet legal or accounting obligations.

7. Your rights

Under the UK GDPR you have the right to access, rectify, erase, restrict processing of, and port your personal data, as well as the right to object to certain processing. To exercise any of these rights, contact us at hello@tracklog.co.uk. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority, at ico.org.uk.

8. Cookies

We use essential session cookies to keep you signed in, managed by our authentication provider Clerk. We do not use third-party advertising or tracking cookies. Because these cookies are strictly necessary to provide the service, they do not require consent under UK law.

9. Third-party services

We rely on a small number of trusted providers to operate TrackLog. Each processes data under its own privacy policy:

  • Clerk — authentication and account management.
  • Stripe — payment and subscription processing.
  • Vercel — application hosting and delivery.

10. Children

TrackLog is not directed at children under the age of 13, and we do not knowingly collect personal data from anyone under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify registered users by email. Continued use of the service after changes take effect constitutes acceptance of the updated policy.

12. Contact

If you have any questions about this Privacy Policy or how we handle your data, contact us at hello@tracklog.co.uk. CodeCall Ltd is registered in England and Wales.