Privacy policy
CrisTracking is a conversion-tracking platform used by advertisers to measure the performance of their own advertising. This policy explains what we collect, why, and what we do with it.
Two different roles
It matters which of these applies to you:
- If you are a CrisTracking customer, we are the controller of your account data — the details you gave us to open and run an account.
- If you visited a website that uses CrisTracking, we process the resulting measurement data on behalf of that website's owner, who decides what is collected and why. We do not sell it, combine it across customers, or use it to build profiles of you.
What we collect
| Data | Why |
|---|---|
| Account name, email address, hashed password, company name | To create and secure your account |
| IP address, user agent, referring URL, landing URL | To record a visit and separate real visitors from bots and automated traffic |
| Approximate country, region and city, and network operator, derived from the IP address | Geographic reporting and traffic-quality checks |
| Device type, operating system and browser | Reporting by device |
| Advertising identifiers passed in the URL by ad platforms (for example Google's gclid), and campaign, ad group, creative, keyword and placement identifiers | To attribute a visit to the advertisement that produced it |
| A first-party identifier stored on the visitor's device | To recognise the same visit as it moves through the pages of one funnel |
| Order reference, amount, currency and event type, sent to us server-to-server by the customer's payment platform | To match a sale, refund or chargeback to the visit that produced it |
| Daily advertising spend imported from an advertising platform the customer has connected | To calculate true cost per acquisition, return on investment and profit |
We do not collect names, email addresses, postal addresses, telephone numbers or payment card details of our customers' end buyers for our own purposes, and we do not ask visitors to enter personal information. Where a payment platform includes buyer details in a notification it sends us, that record is stored only for the customer whose sale it is, is visible only to them, and is not used for any other purpose.
Advertising platform data
When a customer connects an advertising account, we read advertising performance data only — campaign names and identifiers, and the amount spent per campaign per day. We request read access, we never create, edit, pause or delete anything in a connected account, and we do not access customer lists, audiences or billing instruments. The data is used solely to display that customer's own reporting inside their own dashboard. It is not shared with other customers, sold, or used to train anything.
Cookies and similar technology
CrisTracking sets one first-party identifier on the website that installs it. Its only purpose is to recognise a visit as the same visit while it moves from one page of a funnel to the next, so an eventual order can be attributed to the advertisement that produced it. We do not set third-party cookies, and we do not use this identifier for cross-site advertising.
How long we keep it
Measurement data is kept for as long as the customer's account is active, because reporting is historical by nature. A customer can delete their data at any time from within the application. When an account is closed, its data is deleted within 60 days. Account records are kept for as long as needed to meet legal and accounting obligations.
Who we share it with
We do not sell personal data and we do not share it with advertising networks. We use a small number of processors to run the service: our hosting provider, and an IP reputation service used to identify automated traffic. Each receives only what is needed to perform its function.
Security
Data is transmitted over HTTPS and held in a database that is not publicly reachable. Access is restricted by role, and each customer's data is separated so that one customer cannot see another's. Passwords are stored only as salted hashes.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, or to object to its processing. If you are a customer, write to us at the address below. If you visited a site that uses CrisTracking, please contact that site's owner, who decides what is collected — we will assist them in responding.
Changes
If this policy changes materially we will update the date at the top of this page and notify account holders by email.
Contact
Questions about this policy: support@cristracking.com