Privacy Policy
Effective August 6, 2026
This policy explains how Boggs Marketing Toolkit (“MTK,” “we,” “us”) handles information across boggsmtk.com, the MTK dashboard, and our products — including the MTK Attribution tag that our customers install on their own websites. We've tried to write it the way we write everything else: plainly, and matching what the software actually does.
Information we collect on our own sites
- Account information. When you create an account: your email address, display name, and avatar if you set one. Authentication is handled by Supabase.
- Billing information. Payments are processed by Stripe. We receive subscription status and billing metadata; we never see or store your card number.
- Product usage. For licensed tags we log which website hostname requested the tag and a daily request count per site — a health signal used for support and abuse prevention, not a visitor analytics feed.
- Website analytics. We use Vercel Analytics and Google Tag Manager on boggsmtk.com to understand aggregate site usage.
- Preferences.Your theme choice is stored in your browser's localStorage and never leaves it.
The MTK Attribution tag on customer websites
MTK Attribution is installed by our customers (typically marketing agencies) on websites they operate. For that data, the website operator is the data controller and we are a technology provider. The tag is deliberately designed so that visitor-level attribution data does not flow to us:
- Attribution data (UTM parameters, referrer, click IDs, page paths, visit timestamps) is stored in the visitor's own browser (first-party localStorage) and delivered to the website's own forms and dataLayer — meaning it goes to the website operator and their CRM, not to our servers.
- Our servers see only the tag request itself: the license key and the requesting website's hostname, logged as a daily count. We do not receive, store, or process the website's visitor attribution records.
- The tag reads certain first-party cookies set by advertising platforms the website operator already uses (for example Meta's _fbc/_fbpand Google's _gcl_aw) solely to classify the visit and to supply the operator's own conversion tracking. It sets no third-party cookies and performs no cross-site tracking.
Website operators are responsible for disclosing their use of attribution tracking in their own privacy policies and for obtaining any visitor consent their jurisdiction requires. Exactly what the tag captures is publicly documented in What MTK Attribution captures.
How we use information
To provide and improve the products, authenticate you, process subscriptions, provide support, prevent abuse, and understand aggregate usage of our own site. We do not sell personal information, and we do not use customer or visitor data for advertising.
Service providers
We rely on a small set of processors to run the service: Supabase (authentication and database), Stripe (payments), Vercel (website hosting and analytics), Cloudflare (edge delivery of the tag), and Google (Tag Manager). Each receives only what it needs to perform its function.
Data retention & security
Account and billing records are kept for as long as your account is active and as required for legal and accounting purposes. Tag usage logs are aggregate daily counts. Access to production systems is restricted, and data in transit is encrypted.
Your rights
You can access and update account details in your account settings, and you can ask us to export or delete your account data by contacting us. Depending on where you live, you may have additional rights (such as under GDPR or CCPA/CPRA) — we honor reasonable requests to exercise them. For attribution data held by a website you visited, contact that website's operator, who controls it.
Children
Our services are for businesses and are not directed to children under 13. We do not knowingly collect personal information from children.
Changes & contact
If we change this policy, we'll update the effective date above; material changes will be noted on this page. Questions or requests: william@boggscreative.com.