Privacy Policy

MyEmailTracker ("we") is an email tracking service: it lets its users know when the emails they send from Gmail are opened and when the links they contain are clicked. This policy explains what data we process, why, for how long, and what your rights are — whether you are a user of the service or the recipient of a tracked email.

1. Data controller

The service is operated by Ronan Louarn, sole proprietor (French business registration in progress), based in 24310 Bourdeilles, France. For any question about your data: contact@my-email-tracker.com.

2. Data we process

If you are a user of the service

• Account data: email address, name and avatar (with Google sign-in), encrypted password (with email sign-up), language and preferences.
• Tracked emails: for each email you choose to track — recipient addresses, subject line, contained links, technical message identifiers, timestamps.
• Technical data: IP addresses and browsers of your recent devices (a fingerprint used to exclude your own opens from your statistics), session and push notification tokens.
• Billing (paid plans): your plan and subscription state. Payment data (card details) is processed directly by Stripe and never touches our servers.
• Contact: messages you send us through the contact page.

If you are the recipient of a tracked email

• Open and click events: timestamp, IP address and browser (user agent) at the moment the tracking pixel loads or a rewritten link is clicked, together with our classification of the event (human open, mail proxy, bot…).
• Your email address, as entered by the sender in their message.

3. Purposes and legal bases

• Providing the service (tracking, dashboards, notifications) — performance of the contract with the user (art. 6(1)(b) GDPR).
• Recipient tracking — the sender's legitimate interest in knowing the fate of the messages they send (art. 6(1)(f)), balanced by a simple and permanent right to object (see section 5).
• Classification and false-positive prevention (event IP/user agent) — legitimate interest: providing accurate rather than inflated statistics.
• Billing — performance of the contract and legal accounting obligations.
• Replying to your messages — legitimate interest.

4. Retention

• Account data: for as long as the account exists, deleted upon closure.
• Tracking events: kept for the life of the sender's account (they are the service's history). Raw IP addresses and user agents are automatically erased after 12 months; only the classification and client family (e.g. "Gmail proxy") are kept.
• Opt-out list: opted-out addresses are kept as a cryptographic hash indefinitely — that is precisely what guarantees you are never tracked again.
• Contact messages: 24 months.

5. Your rights as a recipient

Never want to be tracked by emails sent through MyEmailTracker again? Opt your address out in one click. Future emails sent to you by our users will contain no tracking pixel and no rewritten links. We only store a cryptographic fingerprint (SHA-256) of your address — never the address itself. The sender is informed that tracking is disabled for your address, with no further detail.

6. Processors and transfers outside the EU

We sell no data. We share data only with the providers required to run the service:

• Heroku (Salesforce, Inc.) — application and database hosting, European Union region.
• Stripe — payments and subscriptions.
• Twilio SendGrid — delivery of our transactional emails (password reset, contact).
• Google — OAuth sign-in and push notification delivery (Web Push/FCM).

Some of these providers are US companies. Transfers are safeguarded by the EU-US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses.

7. The Chrome extension

The MyEmailTracker extension integrates with Gmail for a single purpose: tracking the emails you send. It does not read your inbox and only sends to our servers the information of the emails you send with tracking enabled: recipients, subject and links. Your Google credentials never pass through our servers (OAuth sign-in). Data collected by the extension is neither sold nor used outside this single purpose, in accordance with Chrome Web Store policies.

8. Cookies

The site only uses strictly necessary cookies (sign-in session, language preference). No advertising or third-party analytics cookies are set — which is why you see no cookie banner.

9. Security

TLS encryption of all communications, hashed passwords (bcrypt), encrypted secrets, opted-out addresses stored as hashes only, data access restricted to what is strictly necessary.

10. Your rights (GDPR)

You have the rights of access, rectification, erasure, portability, restriction and objection over your data. You can delete your account and all associated data directly from your Settings (immediate and permanent). For any other request, write to contact@my-email-tracker.com; we reply within 30 days. You may also lodge a complaint with your supervisory authority (in France, the CNIL — cnil.fr).

11. Minors and changes

The service is not directed at persons under 15. This policy may evolve; the update date appears at the top of the page and substantial changes will be notified to users.