Privacy Policy

Last updated June 2026.

PasteTrack is a Chrome extension and dashboard that track the links you choose to share, so you can see which reply actually converted. This policy describes exactly what we collect and what we never do. It matches the real behavior of the product, nothing more.

What we collect

• The URLs you choose to track. Only when you explicitly tap “Track this link” on a link in your composer. Nothing is wrapped silently, and you always see the resulting short link before it goes out.
• Click events on those tracked links. When someone opens one of your tracked links, we record the click. The visitor IP is stored only as a salted hash, never in raw form.
• Signup and conversion events you send us. If you install our tracking snippet on your own site, the conversions you report are attributed back to the share that drove them.
• Your account email. Used to sign you in and to associate your tracked links with your account.
• An optional note and thread context. Only when you turn this on. It lets the dashboard learn which words and formats convert. It is off by default.

What we do not do

• No silent link rewriting. A link is wrapped only on your explicit tap.
• No reading or storing of your browsing. We do not capture your DOM or your post text.
• No selling or transferring your data for unrelated purposes.
• No use of your data for creditworthiness or lending decisions.
• The extension runs only on Reddit and X, and only when you enable it per site.

Why we collect it

One reason: to show you which share drove the clicks and signups, so you can do more of what works. We do not use your data for anything outside that purpose.

Sign-in providers

You can sign in with email and password, an email magic link, or Google. Google sign-in gives us only your email and basic profile, through Supabase, our authentication provider. We do not request access to your Gmail, Drive, or any other Google data.

PasteTrack's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Retention and deletion

We keep your account, tracked links, and click data while your account is active. You can delete your account and all associated data at any time by emailing us at the address below, and we will remove it. Hashed click IPs cannot be reversed to identify a visitor.

Legal basis (GDPR)

For users in the EU and UK, we process click data on the basis of legitimate interest in measuring the performance of links you choose to share. Visitor IP addresses are hashed with a salt so they are not stored in identifiable form. You may object to processing or request erasure by contacting us.

Contact

Questions, data requests, or deletion requests: gewanhce@gmail.com.