Legal
GDPR Notice
Last updated 1 October 2026
If you're in the UK, the EU, or anywhere the GDPR or UK GDPR applies, this page explains how affiliatetracking.co handles your personal data, what we collect, why, and the rights you have. It goes with our Privacy Policy and Cookie Policy.
Who is responsible
The controller for this site is SAAS SEO AGENCY LLC, 145 W 25th St, Fl 7, New York, NY 10001, United States. Contact: [email protected].
What we collect and why
- Account data (name, email, workspace settings) — to run your account. Basis: contract.
- Billing data (handled by Stripe; we see receipts, not card numbers) — to take payment. Basis: contract.
- Usage analytics (pages visited, anonymized IP, device type, via Google Analytics and Microsoft Clarity) — to understand what works on the site and fix what doesn't. Basis: consent, asked before anything is set.
- Affiliate attribution data (a cookie remembering which partner link brought you) — to credit partners when someone they referred buys. Basis: legitimate interests; we keep it to a 90-day cookie and only set it on partner links.
- Support emails — to answer you. Basis: contract / legitimate interests.
If you run the self-hosted edition, your affiliate, click, and commission data stays on your own server. We never receive it.
Who we share it with
Processors that help us operate: Cloudflare (hosting and CDN), Google (Analytics and Tag Manager, with IP anonymization), Microsoft (Clarity session analytics), Stripe (payments), and our email provider for support and transactional mail. We don't sell personal data and we don't share it for advertising.
Where it lives
Our infrastructure is in the United States. Analytics and payment processors may also process data there. Where data leaves the EEA or UK, we rely on the processor's standard contractual clauses or the EU-US Data Privacy Framework (Google and Microsoft are certified participants).
How long we keep it
Account data for as long as your account exists, then up to 30 days so we can send you a copy if you ask. Analytics data per the provider's retention settings (14 months for Google Analytics). Support emails for up to 2 years. Attribution cookies expire after 90 days.
Your rights
You can ask us to:
- give you a copy of your data (access)
- fix anything wrong (rectification)
- delete it (erasure)
- stop processing it (restriction)
- take it elsewhere (portability)
- withdraw consent for analytics at any time (via the cookie banner or by emailing us)
- object to processing based on legitimate interests
Email [email protected] and we'll answer within 30 days. You can also complain to your local data protection authority.
Do we track children?
No. The service is for businesses and we don't knowingly collect data from anyone under 16.
Changes
If our processing changes materially, we'll update this page and the date at the top.