This Privacy Policy explains how Narratrak ("we", "us", or "our") collects, uses, and protects information when you use our service at narratrak.com. By using Narratrak you agree to the practices described here.
1. Information we collect
- Account data — your email address and a bcrypt hash of your password. We never store your password in plain text.
- Monitor configuration — the keywords, subreddit filters, and alert preferences you set up.
- Reddit content — post titles, subreddits, comment excerpts, and metadata fetched from Reddit's public API and stored on your behalf. This is public data accessible to anyone.
- Usage data — scan counts per day (used to enforce plan limits). We do not log IP addresses or track individual page views beyond what Apache records in server logs.
- Session cookie — a
rm_session cookie is set when you log in. It contains a random token (not personal data) that identifies your session. It expires after 30 days or when you log out.
2. How we use your information
- To operate the service — authenticate you, run scans, and display results.
- To send you emails you have opted into — email confirmation, password resets, and scan alerts or digests if you enable them.
- To enforce plan limits — daily scan counters are used to apply free/paid tier restrictions.
We do not sell, rent, or share your personal data with third parties for marketing purposes.
3. Third-party services
- Reddit — we fetch publicly available posts and comments from Reddit's JSON API. Use of Reddit data is subject to Reddit's API Terms.
- Resend — we use Resend to deliver transactional emails (confirmation, password reset, alerts). Your email address is transmitted to Resend solely for this purpose. See Resend's Privacy Policy.
- Hosting — the service runs on a cloud server. Data is stored in a MySQL database on the same server. No data is transferred to third-party analytics or advertising platforms.
4. Data retention
Your data is retained for as long as your account is active. When you delete your account, all personal data (account record, monitors, keywords, stored posts) is permanently deleted from our database within 24 hours. Server logs may retain IP addresses for up to 30 days as part of standard Apache log rotation.
5. Your rights
- Access — you can view all your monitors and stored posts in the dashboard at any time.
- Correction — you can update your email or password in account settings.
- Deletion — you can delete your account from account settings, which removes all associated data.
- Email opt-out — you can disable all email alerts by setting alert frequency to "Off" on each monitor, or by contacting us.
- Data export — to request a copy of your data, contact us at the address below.
6. Security
We use HTTPS for all traffic, bcrypt for password storage, and random session tokens for authentication. We do not store payment card information (billing is handled by Stripe directly). No security measure is perfect; please use a strong, unique password.
7. Children
Narratrak is not directed at children under 16. We do not knowingly collect data from anyone under 16.
8. Changes to this policy
We may update this policy from time to time. We will notify registered users by email if changes are material. Continued use of the service after changes are posted constitutes acceptance.
9. Contact
Questions about this policy? Email us at [contact@yourdomain.com].