This Privacy Policy explains how Narratrak ("we", "us", or "our") collects, uses, and protects information when you use our service at narratrak.com.
1. Information we collect
- Account data — your email address and a bcrypt hash of your password. We never store your password in plain text.
- Monitor configuration — the keywords, subreddit filters, and alert preferences you set up.
- Reddit content — post titles, subreddits, comment excerpts, and metadata fetched from Reddit's public API and stored on your behalf.
- Usage data — scan counts per day (used to enforce plan limits). We do not log IP addresses or track individual page views beyond what Apache records in server logs.
- Session cookie — a
rm_session cookie is set when you log in. It contains a random token that identifies your session. It expires after 30 days or when you log out.
2. How we use your information
- To operate the service — authenticate you, run scans, and display results.
- To send you emails you have opted into — email confirmation, password resets, and scan alerts or digests.
- To enforce plan limits — daily scan counters apply free/paid tier restrictions.
We do not sell, rent, or share your personal data with third parties for marketing purposes.
3. Third-party services
- Reddit — we fetch publicly available posts and comments from Reddit's JSON API. Use of Reddit data is subject to Reddit's API Terms.
- Resend — we use Resend to deliver transactional emails. Your email address is transmitted to Resend solely for this purpose. See Resend's Privacy Policy.
- Hosting — the service runs on a cloud server. Data is stored in a MySQL database on the same server. No data is transferred to third-party analytics or advertising platforms.
4. Data retention
Your data is retained for as long as your account is active. When you delete your account, all personal data is permanently deleted within 24 hours. Server logs may retain IP addresses for up to 30 days as part of standard Apache log rotation.
5. Your rights
- Access — you can view all your monitors and stored posts in the dashboard at any time.
- Correction — you can update your email or password in account settings.
- Deletion — you can delete your account from account settings, which removes all associated data.
- Email opt-out — you can disable all email alerts by setting alert frequency to "Off" on each monitor.
6. Security
We use HTTPS for all traffic, bcrypt for password storage, and random session tokens for authentication. We do not store payment card information (billing is handled by Stripe directly).
7. Children
Narratrak is not directed at children under 16. We do not knowingly collect data from anyone under 16.
8. Changes to this policy
We may update this policy from time to time. We will notify registered users by email if changes are material.
9. Contact
Questions? Email us at info@alexon.capital.
