Privacy Policy

Last updated: June 2026

1. Data We Collect

Account data (when you register):

Email address
Name (optional)
Billing information when you choose a paid plan, processed by Stripe

Analytics data (with your consent):

Pages viewed, tools clicked, search queries, and feature interactions — sent to Google Analytics 4 and stored in our own database
Session recordings and heatmaps — captured by Microsoft Clarity
Browser type, device type, and referring URL

Affiliate tracking data (with your consent):

Which affiliate links you click (tool name, page, position on page)
A session identifier (tr_sid) stored as a browser cookie
A one-way SHA-256 hash of your IP address, salted — this cannot be reversed to identify you
Your browser's User-Agent string and the referring page URL

Essential data (always collected — no consent required):

Authentication session cookies (managed by Supabase) — required to keep you logged in

2. Third-Party Analytics Processors

When you consent to analytics, data is shared with the following third parties:

Google Analytics 4 (GA4)

Processor: Google LLC, USA

Collects: page views, events, session duration, device/browser data.

Cookie retention: _ga 2 years, _ga_* 2 years. Data sent to Google servers.

Microsoft Clarity

Processor: Microsoft Corporation, USA

Collects: session recordings (mouse movement, clicks, scrolls), heatmaps. May capture on-screen content.

Cookie retention: up to 1 year. Data sent to Microsoft servers.

Both processors are subject to their own privacy policies and the EU–US Data Privacy Framework. We do not sell your data to these or any other third parties.

3. How We Use Your Data

To provide and improve the Service
To understand which content and tools are most useful (analytics, with consent)
To attribute affiliate commissions when you click an affiliate link (affiliate tracking, with consent)
To send price alerts and account notifications you have opted into
To process subscription payments via Stripe

We do not sell your personal data to third parties.

4. Cookies & Consent

Cookie / Tracker	Category	Retention	Consent required
`sb-*` (Supabase auth)	Strictly necessary	Session	No
`_ga`, `_ga_*` (GA4)	Analytics	2 years	Yes
Microsoft Clarity session	Analytics / profiling	1 year	Yes
`tr_sid` (affiliate session)	Affiliate tracking	Session	Yes

Your consent choices are stored in your browser's localStorage under the key tr_consent. No consent data is sent to our servers. You can review or change your choices at any time using the Cookie settings link in the site footer.

5. Data Storage & Retention

Account data is stored in Supabase (EU region). Affiliate click records (including hashed IP and session ID) are retained for up to 90 days for commission attribution purposes, then deleted. Aggregate analytics data may be retained longer in anonymised form. Payments are processed by Stripe and subject to Stripe's retention policy.

6. Your Rights

You have the right to:

Withdraw consent for analytics or affiliate tracking at any time via the Cookie settings link in the footer
Access personal data we hold about you
Rectify inaccurate data
Port your data in a machine-readable format
Delete your account and all associated data — email hello@toolrankr.com
Opt out of sale/sharing of personal data (CCPA) — declining analytics and affiliate tracking in Cookie settings achieves this

7. Contact

Data controller: ToolRankr. For privacy requests, contact: hello@toolrankr.com