This policy explains how Tananaev Solutions, identified in our Terms of Service, handles personal information for traccar.org and our services. For privacy questions, contact support@traccar.org.
Separate policies apply to Traccar Client, Traccar Manager, and Traccar SMS Gateway. For customer-controlled tracking data, we generally act on the customer's instructions under our Data Processing Agreement. The customer determines the purposes of tracking and is responsible for its own privacy notice.
Where data protection law requires a legal basis, we rely on performance of our agreement for account and service delivery, legal obligations for required records and disclosures, and legitimate interests in security, support, and service improvement where those interests do not override your rights. We rely on consent where required, including for optional marketing or analytics. Customer-controlled tracking requires the customer's own lawful basis.
We use cookies for login, sessions, and related website functions. Blocking them may prevent those functions from working. Google reCAPTCHA on certain forms helps prevent automated abuse and processes browser and device information. External assets, such as scripts loaded from a content delivery network, also send connection information to their provider.
We use service providers for hosting, storage, payments, email delivery, and enabled notification features. These include Hetzner for server hosting, DigitalOcean for image storage, Stripe for payments, Amazon Web Services for email delivery, and Google for reCAPTCHA and Firebase messaging. Providers receive the information needed for the functions they perform. See Google's privacy policy and Stripe's privacy policy for their practices.
Third-party services loaded on our website may collect information about your activity over time and across websites.
We may disclose information where legally required or necessary to protect rights, prevent abuse, or respond to security incidents.
Forum posts and associated public profile information are visible to others and may be indexed by search engines. Avoid posting private information. Account deletion does not automatically remove public posts: we may preserve discussions while removing or anonymizing personal information where required by law.
Tracking Server and Tracking Account subscriptions are hosted with Hetzner in Germany or Finland. Other providers may process information in additional countries. Where required, international transfers need safeguards such as applicable standard contractual clauses. Contact us for details of the arrangements relevant to your service.
We keep account information while needed to maintain the account; support records while needed to resolve requests and related disputes; and billing records for applicable accounting, tax, and legal requirements. Logs and statistics are retained according to their operational, security, and diagnostic purpose. Newsletter information is kept until you unsubscribe, with any necessary record retained to honor your preference.
Hosted location records are retained by default for up to one year from the date of each record, unless a different retention period is agreed. When a Tracking Account subscription ends, the account is disabled; cancellation does not restart the location-data retention period. Disabled account records remain until you request deletion or we remove them during routine cleanup, subject to applicable legal retention limits. The DPA governs hosted-data return and deletion. Request any needed export before service ends or data is deleted. Public posts may remain as described above.
We use access controls and other security measures appropriate to the information. No system is completely secure. Hosted tracking does not include backups unless separately agreed; redundant database storage is not a backup.
You can manage account details and forum subscriptions through the website, unsubscribe from newsletters using their links, or contact support. Unsubscribing from marketing does not stop necessary service messages.
Depending on applicable law, you may request access, correction, deletion, restriction, or a portable copy of your personal information, and object to certain processing. Where we rely on consent, you may withdraw it without affecting earlier lawful processing. We may need to verify your identity and retain information where legally required. You may complain to your local data protection authority.
For tracking controlled by another organization or server operator, direct requests to that organization. We assist our customers with requests concerning data we process on their behalf.
We will publish updates here and provide additional notice of material changes where required. A policy update does not itself authorize new uses that require your consent.
Effective date: September 28, 2026