Trial Tracker reads your receipt and free-trial emails to show you your subscriptions and warn you before a charge. This page explains what data is used, why, by whom, and how to use your rights under the General Data Protection Regulation (GDPR).
Data controller
Salma Rahim. Contact: contact@trialtracker.fr.
What data is used
- The email address you sign in with.
- If you connect Gmail: your Gmail address and an encrypted, read-only access key that Google gives us.
- What is taken from your receipt, trial and cancellation emails: service name, amount, currency, dates, category, cancellation link.
- Technical ids of the emails already read, so the same email is never read or counted twice.
- Your choices in the app: language, student status, decisions (keep, cancel).
The text of your emails is not stored: it is read in memory and only the details above are kept. Emails that don't look like a receipt or a trial are never opened.
Purposes and legal bases
- Providing the service you ask for (finding your trials and subscriptions, sending reminders, showing your spending): performance of a contract, GDPR article 6(1)(b).
- Keeping the service secure and preventing abuse: legitimate interest, article 6(1)(f).
Your data is never sold, used for advertising, used to train AI models, or shared beyond the list below.
Google data (Gmail)
The access requested is read-only: the app can't send, delete or change an email. Trial Tracker's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. No person reads your emails, except with your explicit consent for a specific problem, or where the law requires it. You can remove the access at any time from the app or at myaccount.google.com/permissions.
Recipients (processors)
Only these providers receive data, each only for its own task and under contract (GDPR article 28):
- Vercel Inc. — Hosting the application (France (Paris), Vercel Inc. (US))
- Supabase, Inc. — Database and email sign-in (Irlande (UE) / Ireland (EU))
- Postmark (ActiveCampaign, LLC) — Sending reminders and receiving forwarded emails (United States)
Receipts from well-known brands are read by built-in rules on our server. Only the emails those rules can't read go to the AI service listed, if any, under terms that forbid it from training on them.
Transfers outside the European Union
Providers in the United States receive data under the EU–US Data Privacy Framework where they are certified, and otherwise under the European Commission's standard contractual clauses. A copy of these safeguards is available from the contact address.
How long data is kept
- Your account and its data: as long as you use it. An account not opened for 2 years is deleted automatically.
- The Gmail access: until you disconnect it or delete your account.
- Deleting your account erases all of the above from our database at once; the host's backups are overwritten within 30 days.
Your rights
You can access, correct and erase your data, restrict or object to its use, and get it in a readable format (portability). On the Account page you can download all your data and delete your account yourself. For anything else, write to contact@trialtracker.fr: you will get an answer within a month.
If you think your rights are not respected, you can complain to the CNIL, the French data protection authority (cnil.fr/fr/plaintes), or to the authority where you live.
Cookies and storage on your device
The app only uses cookies that are strictly needed for it to work or for something you asked for. These are exempt from consent under French and EU rules, so there is no banner. No analytics, advertising or social-media cookies are used, and fonts are served from our own server.
| Name | Purpose | Lasts |
|---|---|---|
| sb-…-auth-token | Keeps you signed in to your account | Until you sign out (renewed on each visit) |
| gmail_oauth_state | Protects the Gmail connection against forgery | 10 minutes |
| lang | Remembers the language you chose | 1 year |
| cancel-letter-profile (localStorage) | Pre-fills your name and address in the cancellation letter. Stays on your device and is never sent. | Until you clear it |
Automated decisions and children
Sorting your emails is automatic but has no legal effect: you decide whether to keep or cancel a subscription. The service is for people aged 15 and over.
Security
Encrypted connections (HTTPS), the Gmail access key encrypted in the database, data access limited to the account it belongs to, and no human reading of your emails.