Privacy policy

1. Who we are

The service brand is GE Hound (also referred to as GE Hound / OSRS GE tracker). The data controller (organisation legally responsible for your personal data) is: [Add your registered legal name, e.g. Your Company Ltd], with registered office at [Add your full registered address].

For privacy requests and questions, contact us at hello@gehound.com.

2. What data we collect and why

• Account data (for example email address, display name, and authentication identifiers from your sign-in provider): we use this to create and secure your account and provide the service. Lawful basis: performance of a contract (providing GE Hound to you).
• Payment data: if you subscribe or pay for features, payments are processed by Stripe. We do not receive or store your full card number on our servers. Lawful basis: performance of a contract; limited processing necessary to manage billing and disputes.
• Usage and analytics data (for example aggregated page views and traffic sources via Google Analytics 4, measurement ID G-8QQ52SWZ35): we use this to understand how the product is used and to improve it. We do not load GA4 for UK, EU, or EEA visitors. Elsewhere we may load it without a separate cookie banner; determine the correct lawful basis (for example disclosure under local law or legitimate interests) with your adviser.
• Marketing and advertising data (via Meta Pixel, Pixel ID 2036034187127278): used for ad measurement and related advertising features where permitted. We do not load the Meta Pixel for UK, EU, or EEA visitors. Elsewhere we may load it without a separate cookie banner; confirm the lawful basis with your adviser.
• Technical and security data (for example IP address, browser type, device type, timestamps, and security logs): used to operate the service, enforce rate limits, prevent abuse, debug incidents, and keep accounts secure. Lawful basis: legitimate interests (running a secure online service), and in some cases contract or legal obligation.

3. Cookies and similar technologies

We use cookies and similar technologies that are needed to run the service (including authentication/session where you sign in). Outside the UK, EU, and EEA, Google Analytics and Meta may set additional cookies when those tools load. A table with common names and retention is on our Cookie policy. In summary:

• Necessary / functional: first-party cookies for session, security, and sign-in (for example via Supabase), as described by your authentication setup.
• Analytics (GA4): such as _ga, _gid, and _ga_8QQ52SWZ35.
• Marketing (Meta): such as _fbp and fr (set by Meta where applicable).

4. Third-party processors (subprocessors)

We use carefully selected providers. They process data on our instructions and must protect it appropriately. Examples include:

• Google LLC (Google Analytics / Tag): analytics and related infrastructure. Data may be processed in the United States and other locations. Google offers Standard Contractual Clauses (SCCs)and supplementary measures as described in their documentation. Sign and retain Google's DPA as applicable.
• Meta Platforms Ireland Limited (Meta Pixel): advertising and measurement. Transfers outside the EEA/UK may rely on SCCs and Meta's documentation. Sign Meta's terms and DPAs as applicable to your use case.
• Supabase Inc. (database, authentication-related storage): hosting customer data you store with us when you use accounts and app features. Supabase provides a Data Processing Agreement; accept it in the Supabase dashboard for production workloads.
• Stripe, Inc. (and affiliates): payment processing. Stripe provides a DPA and SCCs as part of their standard business terms.
• Cloudflare, Inc.and related entities (hosting and edge delivery for this application via Workers / Pages-style deployments): infrastructure and security. Review and accept Cloudflare's DPA as applicable.
• Other providers (for example email delivery such as Resend) may process limited contact or transactional data—describe any extra vendors you actually use.

5. International transfers

Some processors are based outside the UK and EEA (including in the United States). Where we transfer personal data internationally, we rely on mechanisms recognised under UK GDPR / EU GDPR (such as Standard Contractual Clauses and the UK International Data Transfer Agreement / Addendum) together with supplementary measures where required. You can ask us for more information about safeguards we rely on.

6. Your rights

Depending on where you live, you may have rights under the UK GDPR and/or EU GDPR, including:

• Access to your personal data
• Rectification of inaccurate data
• Erasure ("right to be forgotten") in certain cases
• Restriction of processing in certain cases
• Data portability for data you provided, where processing is based on consent or contract and automated
• Object to processing based on legitimate interests
• Withdraw consent at any time (where we rely on consent), without affecting the lawfulness of processing before withdrawal

To exercise these rights, contact us at hello@gehound.com. You may also complain to the ICO (UK) at ico.org.uk, or to your local EU supervisory authority.

7. Retention periods

• Analytics (GA4): we aim to align retention with Google Analytics settings (for example 14 months for user-level event data where you configure that in GA4 Admin). Verify your GA4 property settings.
• Account data: for the life of your account, plus a reasonable wind-down period (for example up to 12 months) unless we must keep it longer for legal claims—adjust to match your data retention schedule.
• Payment and tax records: typically up to 7 years where required for accounting and tax law (jurisdiction-dependent—confirm with your adviser).

8. Third-party analytics and your choices

We do not use a cookie consent banner. In the UK, EU, and EEA, GA4 and the Meta Pixel are not loaded. Elsewhere, those tools may run as described above. You can use your browser settings to block or delete cookies, and use opt-outs offered by Google or Meta where available. See our Cookie policy for more detail.

9. Changes to this policy

We may update this policy from time to time. When we do, we will change the "Last updated" date at the top. Continued use of GE Hound after changes may be subject to legal requirements; we will be clear about material changes where the law requires.