Privacy
What we collect, why, and for how long. We keep only what we need to run ViralTracker and to answer your reservation.
Last updated 31 October 2026
Who we are
This site is run by ViralTracker. For anything about your data, write to tomas@viraltracker.app.
What we collect
- Your account. The e-mail address you sign in with, when the account was created, when you last signed in, and your plan or trial. If you signed up through a colleague's invite link, also which account invited you. Sign-in links and codes are stored only as fingerprints (hashes) and expire after 15 minutes.
- One sign-in cookie. It keeps you signed in. It lasts up to 180 days and renews while you use the site.
- How you use the site. While you are signed in, our own server counts, for each day, how many pages you open on the dashboard, the news feed and the Alerts page, for how many minutes an open page updates itself, whether you saw the end-of-trial screen and whether you clicked from it to the reservation form. We keep only these counts with your account, the date and the time of your first and last visit that day, without your IP address or browser details.
- Where you came from. When you sign up, the form can pass on the campaign tags of the link you opened (utm_source, utm_medium, utm_campaign or ref) and the name of the website that sent you, such as google.com, never the full address. We store them with your new account. No cookie is used for this.
- Reservations. What you send in the reservation form: plan, e-mail, name, company or page name, and if you add them, your role, website or social link, audience size, team size, the tools your team uses, preferred start, note and whether you want product news. We also keep a short tag for the link that opened the form, such as the end-of-trial screen. We do not store your IP address or browser details with it.
- Support requests. When you ask us for help, by e-mail or through our Discord bot on your server, we log the request so we can answer it on time: how to reach you (your e-mail address, or your Discord name and ID), your account or team, what you wrote, your plan at that moment, when it came in and when we replied and closed it, and our short internal note.
- Abuse protection. To limit sign-in and reservation requests, the server keeps your IP address in memory for about an hour. It is not written to our database.
- Your browser's storage. The dashboard and news pages keep a few interface settings in your browser: whether you closed the tips, whether desktop notifications are on, and when you last visited, to show what you missed while you were away. They stay on your device and are never sent to us.
We use no advertising or analytics cookies, place no third-party cookies and run no tracking scripts. The usage counts above are made by our own server.
Discord demo
If you join the Discord demo during your trial, Discord tells us your Discord user ID and your basic profile, such as your username. We keep only your ID and your Discord name with your account, until we delete the demo. We do not get your e-mail address or your list of servers. Discord also gives us a sign-in token: we use it only to read your ID and to add you to our demo server, then cancel it. We do not keep it.
We use your ID to add you to our demo server and to open a private channel for you. The channel holds the alerts we send, what you ask the bot to make, and the text and photos you send to it. The channel is visible to you and to the ViralTracker team that runs the server. Text you send to the bot goes to Anthropic to draft headlines, captions and translations, and a small copy of a photo you send may go to it to find where to crop the graphic. On our side we also count what you ask the bot to make (the kind, the language and the time), to apply the fair-use limits and to see how the demo is used, and we keep a headline you write or a photo you send for a graphic for up to 14 days, so the bot can build on it.
When your trial ends, the channel becomes read-only. 3 days later we delete it, remove you from the server and delete your Discord ID and name from our records, together with the headlines and photos we kept from the channel. You can delete the demo sooner on your account page, and deleting your account deletes it too. We keep a short record that your account had a demo (its status and dates, without your Discord ID), so that each account gets one demo. To keep the demo to one per Discord account, when you join we also store a keyed fingerprint of your Discord ID, not the ID itself, for 12 months.
E-mails we send
Sign-in links and codes when you ask for them, and replies about your reservation. During your trial we may also send two short service e-mails: a guide after your first sign-in and a reminder about a day before your trial ends. They contain no offers, and each one has a link to turn them off. When you invite a colleague, we do not e-mail them: you share the link yourself.
People we contact
When we approach a sports outlet or page ourselves, we use only the business contact it publishes: a newsroom address, or a name and role from its masthead or contact page. We send one message and at most one reminder, to offer ViralTracker. This is our legitimate interest (Art. 6(1)(f) GDPR). We keep the contact for up to 12 months from our last message, or only on a do-not-contact list if you object. Reply to the message or write to tomas@viraltracker.app and we stop at once. You can also complain to the data protection authority in your country.
Who helps us
- Fly.io hosts our servers. Its technical logs, such as error messages, help us keep the service running.
- Resend delivers our e-mails: sign-in links, trial service e-mails, reservation confirmations and the reservation notifications we get. It processes the addresses and the message to deliver it.
- Seznam.cz (Email Profi) hosts our inbox. When you send a reservation, we get a notification there with the details you sent. Your e-mails to us are kept there too.
- Google (Gmail) hosted our earlier inbox. E-mails you sent us before 30 October 2026 may still be kept there.
- Anthropic (Claude API) translates, summarises and checks public posts and news articles for us. We do not send your account or reservation details to it. On the Team plan and in the Discord demo, what you type to our Discord bot, such as a topic for a post, goes to it to draft the copy, and a small copy of a photo you send to the bot may go to it to find where to crop the graphic.
- Discord runs the chat service where the demo happens. It processes your Discord account and the messages in your demo channel under its own privacy policy.
- News publishers. On the news page, article thumbnails load straight from their sites, so those sites see your IP address and can set their own cookies, as with any image on the web.
Our servers run in Frankfurt, Germany. Fly.io, Resend, Anthropic, Google and Discord are US companies, so your data may be processed in the US. Write to us for details of how each of them protects it.
Why we use it
- To give you the account and the plan you asked for: our contract with you (Art. 6(1)(b) GDPR).
- To run the Discord demo you asked for, including its fair-use limits: our contract with you (Art. 6(1)(b) GDPR).
- To keep the demo to one per person (the fingerprint of your Discord ID): our legitimate interest (Art. 6(1)(f) GDPR).
- To answer your reservation and prepare your plan: steps you asked for before a contract (Art. 6(1)(b) GDPR).
- To answer your support requests within the times in our terms: our contract with you (Art. 6(1)(b) GDPR), or, when you write for a team that is our customer, our legitimate interest in helping that customer (Art. 6(1)(f) GDPR).
- To keep the service safe and running (request limits, logs): our legitimate interest (Art. 6(1)(f) GDPR).
- To see how the trial is used and where sign-ups come from, so we can improve ViralTracker, and to send the two trial service e-mails: our legitimate interest (Art. 6(1)(f) GDPR). You can object at any time, and turn the e-mails off from the link in each one.
- To send occasional product news, only if you ticked the box: your consent (Art. 6(1)(a) GDPR). You can withdraw it any time.
- To offer ViralTracker to outlets and pages through the business contacts they publish: our legitimate interest (Art. 6(1)(f) GDPR). You can object at any time.
How long we keep it
- Account, including where you came from and who invited you: until you ask us to delete it.
- Usage counts: up to 13 months, then deleted automatically. Deleting your account deletes them too.
- Sign-in links and codes: deleted a day after they expire. Sessions: deleted when they expire.
- Reservations: up to 24 months, or sooner if you ask us to delete them. Older ones are deleted from our database automatically. A reservation that holds the founding price is kept for as long as that price applies to you, because it is part of our agreement.
- Copies in our inbox (the reservation notification and our e-mails with you): we delete them by hand. If you ask us to delete your reservation, we delete them too.
- Support requests: up to 13 months after we close them, then deleted automatically. Deleting your account, or your team's setup with us, deletes its requests too.
- IP addresses for request limits: about an hour, in memory only.
- Business contacts we approached: up to 12 months from our last message; after an objection only on the do-not-contact list.
- Discord demo: your Discord ID and name, the channel and the headlines and photos we kept from it, until 3 days after your trial ends, or until you delete the demo or your account. Headlines and photos for graphics: up to 14 days within that time.
- The record that your account had a Discord demo, without your Discord ID: as long as your account.
- The fingerprint of your Discord ID: 12 months from when you join the demo.
- Demo usage counts: up to 13 months, like other usage counts. Deleting your account deletes them too.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, limit how we use it, get it in a portable format, object to how we use it, and withdraw your consent to product news at any time. Write to tomas@viraltracker.app and we will reply. You can also complain to the Czech data protection authority, the Office for Personal Data Protection (ÚOOÚ).
Contact
See also our terms of service.