Privacy policy

1. Who we are

Tracking202 and Prosper202 are run by Blue Terra LLC ("Tracking202", "we", "us"). This policy covers:

• this website, prosper.tracking202.com;
• the customer account and billing site at my.tracking202.com;
• the information that a copy of Prosper202 ClickServer installed on your own server sends to us;
• the support chat inside Prosper202 and our AI support assistant;
• the hosted AI connector at mcp.tracking202.com, which lets AI apps such as Claude and ChatGPT reach your own Prosper202;
• our emails and newsletters.

For anything about this policy or your information, write to support@tracking202.com or use the chat inside Prosper202.

2. The short version

• Prosper202 is self-hosted. The clicks, conversions, visitors and campaigns you track are stored in the database on your own server, not with us. Two optional features send some of that data to us, but only once you turn them on: the Landing Page Optimizer and the AI connector.
• Your install still talks to us. It checks your licence, looks for updates, opens the support chat and, unless you switch it off, sends you a daily email report through us. Section 4 lists every one of these.
• Your account holds your name, email address, password (stored only as a hash) and billing details. Card details go to Stripe, not to us.
• We use service providers for payments, hosting, email, newsletters and AI replies. Section 11 lists them.
• We do not sell your personal information.
• You can ask us for a copy of your information, or to correct or delete it, at support@tracking202.com.

3. Your tracking data stays on your server

Prosper202 ClickServer runs on a server you control. The clicks, conversions, visitor details (such as IP addresses, browsers and referrers) and campaign data it records are written to your own MySQL database. We do not receive them during normal tracking, and we cannot see them.

Some of that data leaves your server only when you choose a feature that sends it:

• Landing Page Optimizer, if you pair it with your install. Pairing sends your Customer API key, your install's ID and its address. After that, each new conversion is sent to the Optimizer service we run, including its click and transaction IDs, campaign, payout, times and the visitor's IP address, along with the names and IDs of your networks, accounts, campaigns and landing pages.
• The AI connector, if you connect an AI app to your install. See section 8.
• Services you connect yourself, such as your networks' postbacks and pixels, your own webhooks, a Slack webhook, IPQualityScore fraud checks or Google Play Integrity. They receive what you configure them to receive, under their own policies.

4. What your Prosper202 install sends to us

Prosper202 contacts our servers (mostly my.tracking202.com) for the purposes below.

Usage data. Prosper202 contains a way to send product usage events and attributes to us once an hour, together with your install's ID, your Customer API key and the Prosper202 user's ID, email address and sign-up date. In the current release (1.9.78) no part of Prosper202 records such events, so little or nothing is sent today. There is no setting yet to turn this off. If we start using it, we will update this policy first.

App store lookups. When you add a mobile app to Prosper202, it looks the app up on Apple's App Store or Google Play to fill in its details.

The Prosper202 command line (p202) talks to your own install, not to us. When you run p202 campaign check-urls, it also connects to the offer and landing-page addresses it checks. Its optional timing output stays on your computer.

5. Third-party content inside Prosper202

Some Prosper202 pages load content from other servers. Those servers receive your IP address and browser details when the page loads, as any web server does.

• ProfitWell (by Paddle), which we use for subscription analytics, loads on signed-in Prosper202 pages and receives your Tracking202 account email address.
• Google Publisher Tag, Google's ad server, loads on the Prosper202 sign-in page to show an ad. Google's privacy policy applies to it.
• ads.tracking202.com, our own server, provides the logo at the top of Prosper202 pages and the offers panel on the account home. These requests include your Prosper202 user's older account key, if it has one, in their web address.
• my.tracking202.com sets a cookie through a small image on the account home and the licence-key pages. It records your install's address so that links from your account can take you back to your install.
• Highcharts, the charting library, loads from code.highcharts.com.

6. Your account at my.tracking202.com

When you register and use your account

• Your first name, last name, email address and password. We store the password only as a one-way hash. We also create a Customer API key for your account.
• If you change your email address or password, we email your old address with the time, the IP address the change came from and the new address with most of it hidden.
• If the link that brought you to the sign-up or sign-in page carried campaign tags (utm_source, utm_medium, utm_campaign, utm_content, utm_term or cta) or came from another website, we record the tags and the referring site with your account in our server log. We drop any tag value that looks like an email address.
• If you ask for a password reset, we store a one-time token. The link expires after 60 minutes.

Payments

• Card payments are handled by Stripe. Your card number, the cardholder's name and the billing address are entered into Stripe's own form and go to Stripe, not to us. Stripe's script loads on our account pages.
• We store your Stripe customer ID, your card's brand and its last four digits, and your subscription's plan, status and dates. We show your billing address and invoices by fetching them from Stripe.
• Some older subscriptions are paid through PayPal, which processes those payments under its own policy.

Licence and service checks

• When your install or the AI connector checks your licence, we look up your account and its subscriptions. For accounts created on or after 1 October 2026 without an active Prosper202 Pro subscription or trial, we check with Kit whether your email address is subscribed to the CPM* Newsletter.
• We log each licence check with a short fingerprint of the key (not the key itself), the IP address and the first part of the browser or software name ("user agent"). An older licence check, which current versions of Prosper202 no longer use, logs the whole request, including the key, when the key is refused. Checks from the AI connector are logged with your account ID, email address, IP address and user agent.

Offer deep links (Direct Network Integrations)

Offers from Direct Network Integrations can be shared through deep links on my.tracking202.com. When someone clicks one, we record the click: the IP address, an approximate location and internet provider (worked out with MaxMind databases on our own server), the device and browser type, and any campaign tags (utm_ and s1 to s5) in the link.

Newsletters and community

• If you subscribe to our newsletter from your account, we send your email address and first name to Kit (formerly ConvertKit), which sends our newsletters.
• Your account's support page can recommend other newsletters through SparkLoop. To choose the recommendations, we estimate your country and region from your IP address with a MaxMind database on our own server. If you choose to subscribe to a recommended newsletter, we send your email address, your country and your choices to SparkLoop, and we may earn a referral fee. We keep a record of each such subscription with your IP address, browser user agent, the page you subscribed from, campaign tags and the estimated location.
• When you start a trial or a paid subscription, we send your email address and account ID to our CPM* Tools service. It invites you to our community on Skool and tags you in Kit. When you stop paying, it removes you from the community.

Security and operations

• Our servers keep logs of requests, which include IP addresses and user agents.
• We use New Relic to monitor how my.tracking202.com performs. Its agent on our server records details of the requests it handles, and a New Relic script on our pages sends page-load timings and errors from your browser to New Relic.
• We record actions our staff take in the admin area, with the staff member's IP address. For a small number of accounts with admin access we also record sign-ins and password and email changes, with the IP address used.

7. The support chat and the AI assistant

The chat inside Prosper202 and on your account pages runs on our chat service at chat.tracking202.com.

• How it knows who you are. Your account gives the chat a signed pass that lasts 24 hours. It carries your account ID, account name and email address, an ID for your install, the Prosper202 user's ID, name and email address, and your install's address.
• What it keeps. Your messages and our replies in full, notes our team writes about the conversation, your contact details (name, email address, install address and when you were first and last seen), a short preview of each conversation and a search index for our team. Conversations are stored with Cloudflare in its United States region. Message text also passes through Cloudflare's queues, search and logs, which are not limited to that region.
• What it does not use. The chat sets no cookies and stores nothing in your browser. Its code does not record your IP address or browser details, although our hosting provider's request logs may (see section 12).
• Email. When you write to us, our team gets an email alert with your name, email address and recent messages. If you don't read our reply in the chat within about 10 minutes, we email it to you, and you can answer by email. Replies sent by email are stored in the chat.
• Who can read it. Team members whose role lets them view customers. Only those who may manage customers can reply.
• Earlier chats. Conversations from our earlier in-app messaging, before the current chat service, are kept in our account database.

The AI assistant

We are adding an AI assistant to the chat. When it is switched on, it may send the first reply to a message. It answers from the Prosper202 guides and release notes, and you can say "human" at any time to reach a person. Questions about billing, refunds, cancellations, licences, security or deleting your data always go to a person.

• What it uses: the messages in your current chat and your name as shown in it; if a person answered you in this chat before, a few messages from that exchange, with our team members' names; and your plan and its status (whether a trial is running and when it ends, whether you have Prosper202 Pro), and your install's Prosper202 version and status. It does not use your password, API keys, payment details or tracking data.
• Who processes it: to write a reply, this information is sent to Anthropic, our AI provider. Afterwards every answer is checked automatically for quality: the question, the answer, the guides it cited and your next message, if any, are sent to Anthropic again for a score. A share of answers is also checked by a person on our team. Anthropic's published terms say it deletes these inputs and outputs within 30 days, keeps them longer only to enforce its usage policy or where the law requires, and does not train its models on them.
• Finding the right guide: the assistant searches our knowledge base with Cloudflare AI Search, which uses Cloudflare Workers AI, using search terms drawn from your messages. The knowledge base holds our guides and release notes, plus the corrections and past answers our team has written in general words.
• What we keep: the conversation, as for any support chat. When an answer was wrong, our team may teach the assistant the right answer, written in general words with no names, websites, IDs or account details. Past answers from our team may also be added to what the assistant knows, but only after a person has rewritten them in the same general way. For each reply we also keep a record of its outcome, the assistant's stated reason and confidence, the guides it cited, its cost and the quality check's verdict, for as long as we keep the chat. Separate statistics with no message text are kept in our analytics store for 90 days.

Our AI-assisted support notice describes the assistant in more detail.

8. The hosted AI connector (mcp.tracking202.com)

The connector lets an AI app, such as Claude or ChatGPT, answer questions using your own Prosper202. It is optional, needs Prosper202 Pro, and you approve each connection on your own install, choosing what the app may do (read only, unless you choose otherwise).

• The connection. When you approve, your install creates a new API key for the connector. We store that key, and a one-way hash of your licence key, encrypted in a connection record. The record also holds, unencrypted, your install's address, your Prosper202 user's name, the access you chose and your Prosper202 version. Your licence key itself is never sent to the connector.
• Your data passes through, it is not stored. When the AI app asks a question, the connector fetches the answer from your install and hands it to the app. Your report data passes through our servers in memory to do this; we do not store it or log it.
• Usage records. For each connection, request and tool call we record: a one-way hash of your licence key, the tool used, the result and any error type, the access level, a short one-way hash of your install's address, the AI app's web address, your Prosper202 version, how long it took and how much was read, a shortened error message, the names of the tool's settings (never their values) and the short purpose the AI app gives for the call, with email addresses, web addresses, host names and long numbers removed. We use these records to run and improve the connector. Our analytics provider keeps them for about three months, and we keep a copy for two years.
• Cookies. The connector's pages set a cookie that remembers your install's address for 365 days, so you don't have to type it again, and a short-lived cookie (10 minutes) while you approve a connection.
• Ending a connection. Remove the connector's key on your install (it is labelled "AI: <app name> via mcp.tracking202.com") or remove the connector in your AI app. Access tokens last one hour; a connection that isn't used for 30 days stops working, and none lasts longer than a year.
• The AI app. What Claude, ChatGPT or another app does with the answers it receives is governed by that app's provider and its privacy policy.

To protect the connector, we use your IP address to limit how often connections can be requested. We do not store it for that purpose.

9. This website (prosper.tracking202.com)

• Cloudflare Web Analytics counts visits to every page. It does not use cookies.
• The home page runs our own testing script from maxx.tracking202.com to compare versions of the page. It stores a random visitor ID and the version you were shown in your browser's local storage, and sends the page address, that random ID, the referring page and, if present, a Prosper202 click ID cookie to our testing service.
• Pages load fonts from Google Fonts, so Google receives your IP address.
• A few older blog posts embed YouTube videos in its privacy-enhanced mode.
• The site has no forms. Sign-up buttons take you to my.tracking202.com and pass along the campaign tags from the link you followed.
• The site runs on Cloudflare, which keeps request logs for us.

10. Cookies and browser storage

Third-party content described in sections 5, 6 and 9 (Google, ProfitWell, New Relic, YouTube) may set its own cookies or browser storage under its provider's policy. Our account pages also load code from public code libraries (jsDelivr, cdnjs, Google Hosted Libraries, code.jquery.com, BootstrapCDN, MaxCDN and Microsoft's ASP.NET CDN), which receive your IP address when your browser fetches the files.

11. Who we share information with

We do not sell your personal information or rent our customer lists. We share it only with the service providers below, for the purposes described in this policy, when you ask us to (such as subscribing to a recommended newsletter), or when the law requires it.

If Blue Terra LLC or the Tracking202 business is sold or merged, your information may be transferred to the new owner, who must use it in line with this policy.

12. How long we keep information

• Account and billing information: while your account is open, and afterwards for as long as we need it for tax, accounting, legal claims or to prevent fraud.
• Support chats and information your install sends us: until you ask us to delete them.
• AI connector usage records: about three months with our analytics provider; our copy for two years.
• AI assistant reply records: as long as the chat they belong to; the statistics in our analytics store for 90 days.
• Sign-in sessions expire after 120 minutes without activity; password-reset links after 60 minutes; chat passes after 24 hours.
• Server and hosting logs are kept for limited periods set by us and our hosting providers.
• Providers such as Stripe, Kit and Anthropic keep information under their own policies (Anthropic's is described in section 7).

13. Your choices and rights

• Access, correction, deletion and a copy. Write to support@tracking202.com or ask in the chat. You can update your name, email address and password yourself in your account settings. There is no self-service button to delete your account or download your data yet, so we handle these requests by hand. We may need to confirm that the request comes from you.
• What deletion covers. For a Prosper202 user, we delete their chat conversations, messages, notes and contact record, our team's summaries and search entries, our quality notes on the assistant's replies to them, anything the assistant was taught from their conversations, and the user records, usage events and consent records their install sent us. When you close your account, we delete or anonymise the rest of your account information, except what we must keep for the reasons in section 12, and we ask our providers to delete what they hold where they allow it.
• What it can't reach. Emails already sent, and copies already held by providers under their own policies until they delete them.
• Newsletters. Every newsletter has an unsubscribe link.
• Switching things off in Prosper202. You can turn off the daily email report and AutoCron (section 4). The Landing Page Optimizer and the AI connector are off unless you turn them on, and you can disconnect them.
• Where you live. Depending on the law where you live, for example in the European Union, the United Kingdom or California, you may have further rights, such as to object to or restrict some uses of your information, or to complain to your data protection authority. We will answer requests to exercise these rights wherever you live.

14. Your own visitors' data

When you use Prosper202 to track visitors to your own websites and offers, you decide what is collected and you are responsible for telling your visitors and getting any consent your law requires. Prosper202 has settings to help: a privacy mode that sets no cookies and stores masked IP addresses (for all visitors, or for visitors from the EU), a consent switch your pages can use to turn off cookies and other browser signals, and a way to anonymise customer records.

When you turn on a feature that sends your visitors' data to us (the Landing Page Optimizer or the AI connector), or send traffic through an offer deep link on my.tracking202.com (section 6), we process that data on your behalf to provide the feature.

15. Where information is stored

Blue Terra LLC is based in the United States. Your account information is stored with Amazon Web Services in the United States. Support chat conversations are stored with Cloudflare in its United States region, though the chat's queues, search and logs are not limited to that region. Some of our providers, including Cloudflare's global network, may process information in other countries. By using our services from outside the United States, you understand that your information will be transferred to and processed in the United States.

16. Security

We protect information with measures such as hashed passwords, encrypted connections, signed chat passes that are never put in web addresses, encrypted AI connector keys and access limited to the staff who need it. No system is completely secure. If a breach affects your information, we will tell you as the law requires.

17. Children

Our services are business tools for marketers. They are not meant for children, and we do not knowingly collect information from anyone under 16. If you believe a child has given us information, contact us and we will delete it.

18. Changes to this policy

When we change this policy, we will update it here and change the date at the top. If a change is significant, we will also tell customers by email or in their account.

19. Contact us

Blue Terra LLC (Tracking202)
Email: support@tracking202.com
Or use the chat inside Prosper202.