Your numbers are yours.

The short version

• There is no analytics package, no tracking pixel and no advertising code anywhere in Trackost. Exactly one third-party script exists: Paddle’s checkout, which loads from cdn.paddle.com when you open checkout on the billing page. Apart from that, visiting a page tells nobody but our own server.
• We collect what running the product requires: your email address, and the workspace data you enter.
• Every workspace is isolated from every other one — in the application code and again in the database.
• Your data exports to CSV whenever you want, and you can ask us to delete it.

What we collect

• Your account. An email address and a password when you sign up, plus a display name if you give one. Passwords are handled by Supabase Auth, which stores them hashed — Trackost never stores your password and cannot read it.
• Your workspace data. The materials, recipes, products, purchases, production batches, orders, costs and reports you enter or import, and the orders we sync from a sales channel you connect. That is the product — without it there is nothing to cost.
• Your teammates. If you invite someone, we store the email address you invited and the role you gave them.
• Nothing else. No location, no device fingerprint, no advertising identifier, no profile of what you clicked.

What we don’t do

• No analytics. Not Google Analytics, not Plausible, not PostHog, not Segment, not Vercel Analytics. There is no analytics package of any kind in the codebase, so there is no dashboard anywhere counting your visits.
• No tracking pixels, and one third-party script. Every script a page loads is served from our own domain and is part of the application itself — with one exception. Opening checkout on the billing page loads Paddle’s checkout script from cdn.paddle.com; that is the only code on any page that comes from somewhere else, and it is there to take your payment, not to watch you. Nothing is fetched from an advertiser or an analytics vendor. The first-party scripts include the one line that reads the hint cookie described below, which decides whether the header says “Sign in” or “Open dashboard”. Web fonts are served from our own domain too, so apart from that checkout a page load fetches nothing from anyone else.
• No mailing list. The address you type into a “Start free trial” form goes no further than the sign-up step. It is not added to a mailing list — Trackost doesn’t run one.
• No selling, no sharing, no ad networks. Your costs, margins, suppliers and customers are never sold, rented, or handed to an advertiser. They are the whole reason you’d trust a costing tool.

Where it lives, and who can reach it

• Account-scoped, twice over. Every query the application makes carries your account id, and the database enforces the same rule independently with Postgres row-level security: a session belonging to one workspace cannot read another workspace’s rows even if the application asked it to.
• Your team. People you invite see the workspace you invited them to, at the role you gave them — and a member can be seated without permission to see money figures at all.
• Our infrastructure. Trackost is hosted on Vercel, and its database, authentication and file storage run on Supabase. Paddle handles checkout and subscriptions as merchant of record. If you connect a sales channel, that channel — Shopify, Etsy or Faire — exchanges order and buyer data with your workspace, and only because you connected it. Vercel, Supabase, Paddle and the channel you chose: that is the complete list of companies that touch this data on our behalf. There is no email marketing service and no analytics vendor.
• Us. We look at your workspace data when you ask us to — a support question, or the free white-glove migration where you send us your old exports and we load them for you.

Cookies

Three, and this is the complete list:

• Session cookies. Set by Supabase Auth when you sign in. They are what keeps you signed in from one page to the next; without them the app cannot work.
• tk-signed-in — a cosmetic hint. It holds the single value 1, is readable by the page (not http-only), and is used for exactly one thing: deciding whether the button in the marketing header reads “Sign in” or “Open dashboard”. It grants no access to anything — the session cookies above are the only thing that does.
• sidebar_state — the sidebar toggle. It holds true or false and records whether you last collapsed the app’s sidebar. Your browser writes it the moment you collapse or expand it — never on page load, never on a phone — and it expires after seven days. It carries no personal data and no identifier. Nothing in Trackost reads it back today: it comes with the sidebar component the app is built on, and it is listed here because a complete list is the only kind worth printing.

No advertising cookies, no analytics cookies, no cross-site trackers. There is no cookie banner here because there is nothing to consent to.

Payments

Trackost does not process card payments itself. Checkout runs on Paddle, which acts as merchant of record: card details are entered on Paddle’s checkout and never reach Trackost’s servers. All we keep against your account is Paddle’s customer and subscription reference ids, so we can show you the plan you are on and cancel it when you ask. The free trial takes no card at all.

Exporting and deleting your data

• Export, any time. Your reports export to CSV from inside the app — materials, products, orders, purchases, profit and loss and the rest. No request, no queue, no “contact sales”.
• Deletion, on request. Email us from the address on the account and we will delete the workspace and the data in it. Say what you want removed; if it is the whole workspace, say so plainly.
• Cancelling is not deleting. Ending a subscription does not erase anything by itself — your data stays exportable, and nothing is held hostage.