Privacy policy

Plain language, one page. It covers zyratrack.com (the site), app.zyratrack.com (the tracker) and zyratrack.com/forum (the community). Last updated 27 August 2026.

Who we are

Zyra Track is the data controller for everything below. Questions and data requests: support@zyratrack.com. The GDPR applies to all of it.

The website

The site is static reference material. Our web server keeps standard access logs (IP address, page, time, browser) for up to 14 days, used only to keep the site running and to investigate abuse. Questions you type into Ask are sent to our AI provider to produce the answer and are not tied to an account.

Cookies, and what we ask before setting them

Two things here would set cookies, and neither runs until you accept: Google Analytics (measurement ID G-49PJ6FVE7L), which counts visits and shows which pages are read and sets _ga and _ga_*; and a first-touch zt_attr cookie that remembers which link brought you here — our own campaign labels, the referring site's hostname and the page you landed on, never a full URL and nothing personal — so we can tell which writing is worth doing. On a first visit no request is made to Google at all. Decline and neither is loaded, nothing is stored, and every page behaves exactly the same.

Your answer is kept in a zt_consent cookie on .zyratrack.com for a year, so that the app at app.zyratrack.com honours the same decision — recording a choice is the one thing a cookie is genuinely necessary for here. Change it whenever you like with Cookie settings at the bottom of any page; withdrawing also deletes the analytics and attribution cookies we set. If you have never answered, nothing is tracked anywhere on the domain.

Two cookies are exempt because the site cannot work without them, and they are unaffected by your choice: zt_forum, the forum session that keeps you signed in, and zt=1, a flag that simply tells the site you are signed in so it can show the right button. Declining analytics never signs you out.

The tracker app

Your dose log, protocols, inventory and lab results live on your device and — with an account — in your private, per-user space in our cloud database (Supabase, EU-hosted), readable by you alone and used only to back up and sync your own devices. It is never shared between users, never sold, never used for advertising, and never analysed except by features you switch on yourself. Research contributions (Zyra Science) happen only if you explicitly join, with identity stripped, and can be withdrawn in Settings. The app has its own full statement under Settings → Privacy; where this page and that statement differ, the app’s statement governs for app data.

Subscriptions are billed by Stripe; we receive your subscription status and the last digits of your card, never the full card number. Transactional email (welcome, receipts, support replies) is sent through Resend, processed in the EU. Our own product analytics run under a random identifier; the IP address is discarded at ingestion.

The community forum

To post you need an account: an email address and a password, or a Google sign-in (we store Google’s account identifier, never your Google password). You choose a handle; your email is never shown to other members. Everything you post is public, stays attributed to your handle, and may remain visible after you leave the forum unless you ask us to remove it.

IP addresses. To keep the forum free of sellers and fake accounts we record the IP address used to create an account, to start a session, and to publish a post, and we limit how many accounts can be created from one address per day. These addresses are visible only to our moderators, are used only for abuse prevention and moderation, and are deleted when the account is deleted. Moderation records (held posts, reports you make or receive, moderator notes) are kept while the account exists.

Cookies: one first-party session cookie (zt_forum) that keeps you signed in for up to 30 days and holds no personal data, plus a short-lived cookie during Google sign-in. No advertising cookies.

Processors

Supabase (accounts, app data), Scaleway (forum database, Paris), DigitalOcean (hosting), Stripe (payments), Resend (email), Google (sign-in; analytics on the site), and our AI provider for Ask. Each is bound by a data-processing agreement and may not use your data for its own purposes.

Your rights

Access, export, correction, erasure, restriction and objection — email support@zyratrack.com from the address on the account. App data can be exported and deleted from inside the app. Forum accounts are deleted on request; posts are removed or anonymised as you choose. We answer within 30 days. You can also complain to the data-protection authority where you live.

Children

Zyra Track is for adults. Accounts are not offered to anyone under 17, and the forum requires 18+.

See also the terms of use and the community rules.