Website privacy

Tacko, operated by Sanja Malović. Contact info@tacko.io.

tacko.io uses Google Analytics, provided by Google Ireland Limited and Google LLC, to measure pseudonymous usage data, including device, browser, and pages visited. We load Google Analytics only after you explicitly accept analytics. IP anonymization is enabled; GA4 does not log or store individual IP addresses. Google Analytics uses _ga and _ga_<id> cookies that last up to 2 years. Google Analytics event data is kept for the retention period set in our Google Analytics property (at most 14 months).

Use “Cookie / analytics settings” in the footer to change your choice. Rejecting stops Google Analytics and optional Tacko website telemetry, removes _ga cookies for this domain on a best-effort basis, and reloads the page to stop already loaded tracking code.

We use Vercel Web Analytics and Speed Insights for cookieless, aggregated visit and performance measurements. Vercel also hosts this website. Optional Tacko website telemetry is gated by the same analytics consent; it records page paths and browser errors (including error messages and stack traces). It does not read extension conversations. We do not use website analytics to collect your extension conversations.

Google Analytics and optional Tacko website telemetry use your consent (GDPR Art. 6(1)(a)). Cookieless Vercel visit and performance measurements and website hosting rely on our legitimate interests in understanding and operating a reliable website (Art. 6(1)(f)). Storing your theme preference and analytics choice relies on our legitimate interests in remembering your settings and respecting your choice (Art. 6(1)(f)). Email correspondence relies on our legitimate interests in answering inquiries and handling support requests (Art. 6(1)(f)).

Website purchases are processed by Stripe. Stripe Checkout collects cardholder name, email, card details, billing country and postal code. Stripe handles card details; we never see full card numbers. Tacko receives your name, email, billing country/postal code, amount, and purchase ID to fulfill your purchase and handle refunds (GDPR Art. 6(1)(b), contract). Payment records are retained by Stripe and as required by applicable tax law (Art. 6(1)(c)). We use your email and our SMTP email provider to send requested restore links, valid for 30 minutes, under the same contract basis. We store a lowercase email in Stripe customer metadata for restore lookup (Art. 6(1)(b), contract). For fraud and duplicate-payment review, we record purchase session IDs in Stripe customer metadata and send a notice to info@tacko.io (Art. 6(1)(f), legitimate interests). To prevent abuse, transient in-memory rate limits use IP addresses and email hashes; these are not persistently stored (Art. 6(1)(f), legitimate interests). The signed license key contains no personal data. License verification happens offline; the extension itself still makes no network requests.

You have rights to access, rectification, erasure, and restriction of processing of your personal data (GDPR Art. 15–18), subject to the conditions in the GDPR.

You can withdraw consent at any time using “Cookie / analytics settings” in the footer (Art. 7(3)). Withdrawal does not affect the lawfulness of processing before you withdrew consent.

Data portability applies only to personal data you provided that is processed by automated means on the basis of consent or a contract (Art. 20).

You can object, on grounds relating to your particular situation, to processing based on our legitimate interests, including email correspondence (Art. 21). For consent-based Google Analytics and optional Tacko telemetry, use the withdrawal option above.

Analytics data is pseudonymous, so we may be unable to identify you from it. We may need additional information from you to identify the data relevant to your request (Art. 11(2)). Send requests to info@tacko.io; we respond within one month (Art. 12(3)).

You can lodge a complaint with a supervisory authority (Art. 77), including Informacijski pooblaščenec Republike Slovenije (Information Commissioner of the Republic of Slovenia), Dunajska cesta 22, 1000 Ljubljana, Slovenia. You may also complain to the authority in the EU country of your habitual residence, place of work, or the alleged infringement.

We store your light or dark theme preference and analytics consent choice in your browser’s localStorage. You can remove it by clearing this site’s browser data.

If you email us, your email provider and ours process your message so we can respond. Please avoid sending private conversations or credentials. Contact info@tacko.io with privacy questions.

AI Chat Handoff processes conversation content locally in your browser. Its separate extension privacy policy explains access, storage, and transfers.