Privacy Policy

Effective 12 September 2026

thingtrack.co.uk (the “Site”) is owned and operated by Prestanda Ltd t/a ThingTrack. Prestanda Ltd is the data controller and can be contacted at:

info@thingtrack.co.uk
Unit 11/12 Hall Farm, Sywell Aerodrome, Sywell, Northamptonshire, England, NN6 0BN

Prestanda Ltd is registered with the Information Commissioner’s Office under registration number ZC219968.

Purpose

This policy tells you what personal data we collect, how we use it, who we share it with, and what rights you have.

UK GDPR

We follow the UK General Data Protection Regulation as enshrined in the Data Protection Act 2018.

The personal data we collect

We only collect what the product needs to work.

• Your email address. You sign in with a code we email you. There is no password. Your email address identifies your account.
• What you record. The names and descriptions you give your spaces, containers and items. This is your content, and it can contain whatever you type.
• Photos you upload. Pictures you add to items, and the thumbnails we generate from them.
• Subscription details. Which plan you are on, and whether it is active. See Payments below for what happens to card details.

We do not track you. The Site runs no analytics, no advertising pixel and no third-party script of any kind.

Legal basis

We process your data to perform the contract you enter into when you create an account, under Article 6(1)(b) of the UK GDPR. Where you pay for a plan, the same basis covers the subscription. We rely on our legitimate interests under Article 6(1)(f) to keep the service secure and to prevent abuse.

How we use it

To run the product: to show you your inventory, to send your sign-in code, and to manage your subscription. We do not use it for anything else, and we do not sell it.

Payments

Payments are handled by Stripe. Your card details go to Stripe directly and we never see or store them. We keep only what Stripe tells us about the state of your subscription.

Who we share data with

We use these providers to run the service. Each receives only what its job needs.

• Fly.io — hosting and databases. Our servers and database run in London.
• Tigris — storage for the photos you upload.
• Postmark — sends your sign-in emails. Receives your email address.
• Stripe — payments and subscriptions.
• Cloudflare — DNS for our domain.

We will not share your data with anyone else, except where the law requires it, where it is needed for legal proceedings, to establish or defend our legal rights, or to a buyer if the business is sold.

Cookies

We set no analytics or advertising cookies, which is why you have never seen a cookie banner. The only cookies we set are strictly necessary to deliver something you asked for, and those do not need your consent under the Privacy and Electronic Communications Regulations.

• __Host-session — keeps you signed in. Expires after 7 days.
• it_theme — remembers whether you chose the light or dark theme.

Both are first-party. Nobody else can read them.

How long we keep it

We keep your account and everything in it for as long as your account exists. A home inventory is meant to last, so we do not delete it on a timer.

If you ask us to delete your account, we delete it and its contents. Sign-in codes expire within minutes and are never stored in a readable form.

Your rights

Under the UK GDPR you have the right to:

• be informed about how we use your data
• get a copy of it
• have it corrected
• have it erased
• restrict how we process it
• take it elsewhere
• object to us processing it

There is no button for this yet. To exercise any of these rights, email info@thingtrack.co.uk and we will do it by hand. We will respond within one month.

Keeping your data safe

Your inventory is isolated from every other account at the database level, not only in our application code. Traffic to the Site is encrypted. We take reasonable precautions, but no service on the internet can promise perfect security.

Children

ThingTrack is not intended for children under 16, and we do not knowingly collect their data. If we learn that we have, we will delete it.

Changes

We may update this policy to stay accurate and lawful. When we do, we will change the effective date at the top. If a change matters to you, we will email you.

Complaints

Please contact us first at info@thingtrack.co.uk so we can put things right. You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority, at any time.

Contact

Jason Dilworth, Data Protection Officer
info@thingtrack.co.uk
Unit 11/12 Hall Farm, Sywell Aerodrome, Sywell, Northamptonshire, England, NN6 0BN