TrackFu was built on a simple constraint: it doesn't talk to the internet. This policy explains what that means for your data, for your clients' data, and for the small amount of information we do collect.
Last updated: August 25, 2026 · Effective: August 25, 2026
The short version: TrackFu stores everything on your own device. Your contacts, your clients, your payments and your notes never leave it — we couldn't see them if we wanted to. The only thing TrackFu ever sends out is a licence key check when you activate a paid plan, and the only personal data we hold is an email address.
TrackFu is a browser extension and web service operated by Burnt Bacon LLC, a Utah limited liability company doing business as FuForge, based in South Jordan, Utah, United States. When this policy refers to "we," "us," or "our," it means Burnt Bacon LLC.
Burnt Bacon LLC is responsible for personal information collected in connection with the website at fuforge.com and the TrackFu browser extension. For users in the European Economic Area, the United Kingdom, and Switzerland, Burnt Bacon LLC is the data controller of that information.
TrackFu runs entirely on your device. The following never leaves it and is never transmitted to us or to anyone else:
TrackFu stores your working data in your browser's own storage, on your computer:
This data is written by TrackFu and read by TrackFu. It is not sent anywhere. Burnt Bacon LLC has no access to it, no copy of it, and no way to recover it if you delete it.
TrackFu is a CRM, so most of what you put into it is information about other people — your clients and your prospects. That data is yours to control and yours to protect.
Because TrackFu never transmits it, Burnt Bacon LLC is neither a controller nor a processor of your clients' personal data. We never receive it, so we cannot access, disclose, export or delete it on anyone's behalf.
If you are subject to GDPR, CCPA or similar laws in your own dealings with your clients, you remain the controller of their personal data, and your obligations to them — including responding to access and deletion requests — remain yours to meet. TrackFu's export and delete functions are the tools you use to meet them.
TrackFu's paid features are unlocked with a licence key. Each time the extension activates or validates your key, it sends a request to our licensing server at api.fuforge.com containing only the licence key itself.
That request does not include — and cannot include — your contacts, to-dos, payments, notes or attachments. It carries the key and nothing else.
If you are using TrackFu without a paid licence, the extension makes no outbound network requests at all.
When you visit fuforge.com, we may automatically receive:
We do not use Google Analytics, cross-site tracking pixels, advertising networks, or data brokers.
This applies to the website. The TrackFu extension contains no analytics of any kind.
If you join the TrackFu waitlist, we store the email address you give us and nothing else. We use it to tell you when TrackFu launches and when significant updates ship. You can unsubscribe from any email we send, and we will delete your address on request within 30 days.
The TrackFu extension does not send crash reports, usage analytics, or any telemetry to us or to any third party. It contains no external libraries and loads nothing from a CDN.
Its only outbound network request is the licence validation described in section 2.4. If you have not activated a paid licence, it makes no outbound network requests at all.
You can verify this yourself: open your browser's developer tools, switch to the Network tab, and use the app.
The personal data we hold is limited to the email address you choose to give us and, if you buy a paid plan, your licence and billing reference. We use it to:
We do not use it for advertising or profiling, we do not sell it, and we share it with no one other than the email delivery provider described below.
TrackFu itself shares data with nobody, because it transmits nothing. The website relies on a small number of services.
Waitlist and announcement emails are sent via a third-party email delivery provider. Only your email address is shared for this purpose.
Our website servers are located in the United States. By using fuforge.com, you consent to your information being processed and stored in the United States.
We do not sell your data to any third party.
The TrackFu extension does not use cookies.
The fuforge.com website uses a small number of strictly necessary cookies. We do not use advertising cookies, analytics cookies, or third-party tracking cookies.
You can disable cookies in your browser settings. Doing so may prevent some site features from working correctly.
Regardless of where you live, you can contact us at any time to exercise the following choices. We respond to all requests within 30 days at no charge.
These rights apply to the data we hold — which, for most people, is only an email address. The data inside TrackFu is already entirely under your control: you can export it, edit it or delete it yourself at any time, without asking us.
Request a copy of the personal data we hold about you.
Ask us to correct inaccurate or incomplete data.
Request that we delete your personal data from our systems.
Opt out of any future marketing emails at any time.
Receive a copy of your data in a portable, readable format.
We will never penalize you for exercising any privacy right.
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know what personal information we collect, the right to delete it, the right to correct it, and the right to opt out of the sale of personal information. We do not sell personal information. To submit a request, email us at privacy@fuforge.com with the subject line "California Privacy Request."
If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, your personal data is protected under the EU General Data Protection Regulation (GDPR) and equivalent UK and Swiss law. Burnt Bacon LLC is the data controller for the personal information we hold about you.
We process that data on the following legal bases: your consent (waitlist and announcement emails, which you may withdraw at any time); our legitimate interests (securing our service, preventing fraud, and operating our website); and compliance with legal obligations.
In addition to the choices listed above, you have the right to restrict or object to our processing of your data, the right to withdraw consent at any time, and the right to lodge a complaint with your local data protection supervisory authority.
Because our servers are located in the United States, personal data we hold is transferred to and processed in the US. Where required by law, we rely on appropriate safeguards and your explicit consent for this transfer. To exercise any of these rights, email us at privacy@fuforge.com with the subject line "GDPR Request."
TrackFu's security model is that there is almost nothing on our side to breach. Your working data — contacts, clients, payments, to-dos and attachments — never reaches our servers, so it cannot be exposed by one. The only thing our licensing server ever receives is a licence key, and licence keys are stored hashed in our database.
That places real responsibility with you:
For the website, all data in transit between your browser and our servers is encrypted with TLS (HTTPS), and access to production systems is restricted to core team members via SSH key authentication.
No system is perfectly secure. If we become aware of a data breach affecting personal information we hold, we will notify you promptly in accordance with applicable US state and federal law and, where applicable, the GDPR.
TrackFu is not directed at children under the age of 13. We do not knowingly collect personal information from anyone under 13 in compliance with the Children's Online Privacy Protection Act (COPPA). If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly.
This Privacy Policy and any disputes arising from it are governed by the laws of the State of Utah and applicable federal law of the United States, without regard to conflict-of-law principles. By using TrackFu, you consent to the jurisdiction of the state and federal courts located in Salt Lake County, Utah. Nothing in this section removes any mandatory data-protection rights you have under the laws of your country of residence.
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top and, for material changes, notify anyone on our email list at least 14 days in advance.
Continued use of TrackFu after changes take effect constitutes your acceptance of the updated policy.
