Privacy Policy

Last updated: August 23, 2026

1. Data controller

The controller of your personal data is To sider ApS, Armeniensvej 27, 2300 København S, Denmark (CVR DK42753491). For any privacy question, contact us at pa@tosider.dk.

2. What we collect and why

Account data. When you create an account we store your email address and name. This is used to provide the service and send the emails you subscribe to. Authentication is handled by Clerk.

Subscription data. If you subscribe, we store your subscription status and a reference to your Stripe customer/subscription, so we know whether your access is active.

Email preferences. Whether you have opted into the bi-weekly digest and/or the paid instant alerts, managed via Resend.

Usage data. Aggregate analytics about how the site is used, via Google Analytics.

3. Payment data and card details

We do not collect or store your card number. All payments are handled by Stripe, a PCI-DSS compliant payment provider. We retain only a token/reference to your Stripe customer and subscription — never the card details themselves.

For the paid subscription, Stripe is the merchant of record and sells to you as Link, Stripe’s merchant of record service. For that sale Stripe decides for itself what it does with your data — it takes the payment, creates your Link account, issues the receipt and invoice, files and remits the tax, and answers payment support — so it acts as an independent controller of that data rather than as our processor. It is our processor only for the parts we ask it to do on our behalf, such as keeping the subscription record that tells us your access is active. Stripe’s handling of your data is described in their privacy policy: https://stripe.com/privacy.

4. Legal bases (GDPR)

We process your data to perform our contract with you (providing the service and subscription), on the basis of your consent (for marketing emails, which you can withdraw at any time), and on our legitimate interest in operating and improving the service.

5. Processors and third parties

We share data only with service providers that help us run AI Release Tracker, each acting as a data processor under appropriate agreements: Clerk (authentication), Resend (email delivery), Google Analytics (usage analytics), and Vercel (hosting). We do not sell or rent your personal data to third parties for their own purposes.

Stripe (payments) sits outside that list. As explained in section 3, it is the merchant of record for the paid subscription and is an independent controller for the sale, not only our processor.

6. Business transfers

If AI Release Tracker or To sider ApS is involved in a merger, acquisition, reorganisation, or sale of all or part of its assets, your personal data may be transferred to the successor or acquiring entity as part of that transaction. This is a transfer of the business, not a sale of your data to a third party for its own purposes. We will notify you of any such change (for example by email or a notice on the site), and the new owner will remain bound by this policy or one that offers equivalent protection.

7. Data retention

We keep your account and subscription data for as long as you have an account, and as required to meet legal and accounting obligations. You can ask us to delete your account at any time.

You can also ask Stripe to delete the data it holds for your purchases. When you do, Stripe cancels the subscriptions it sold you and deletes the related records — including the customer, subscription and invoice records held in our own Stripe account — and tells us that the request was made.

8. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, and port your data, and to object to certain processing. You can withdraw consent to marketing at any time from your settings. To exercise any right, email pa@tosider.dk.

If you believe we handle your data unlawfully, you may lodge a complaint with your local data protection authority in the EU/EEA. You can find yours via the European Data Protection Board: https://edpb.europa.eu/about-edpb/about-edpb/members_en.

9. Cookies

We use a small number of cookies that are necessary for authentication and for anonymous usage analytics. You can control cookies through your browser settings.