Privacy

Last updated October 28, 2026.

The short version

You can use TrackRx without an account. Then your classes, grades, saved schools, notes and ZIP code stay in your browser and never reach our server.
If you choose to sign in, we keep a copy so it syncs to your other devices. It's encrypted before we store it, and you can delete it with one tap.
We count anonymous activity to improve the site. That never includes your classes, grades, notes, ZIP code, email or anything you type.
We don't sell or share your data, and there are no ads or ad trackers.

Without an account

Everything you enter is saved in your own browser on your own device. Clearing your browser data erases it. "Copy link" and "Send to myself" put your answers inside the link itself. Those links don't pass through our server, but anyone you send one to can open it.

With an account (optional)

What we store: your email address; the same answers your browser keeps (classes, grades, labs, retakes, saved and hidden schools, notes, ZIP code, filters); and whether you turned on deadline reminders. No password, name, phone number, transcript or payment information.

How it's protected:

Your email and data are encrypted (AES-256) with a key that only our server code holds, before they're saved. Someone with access to the database alone would see scrambled text.
Sign-in uses a one-time link we email you. It works once and expires after 15 minutes. We only keep a one-way fingerprint of it.
Once you're signed in, your browser keeps a random session code in a secure cookie that scripts on the page can't read, sent only over an encrypted connection to this site. It lasts 90 days or until you sign out.
Each account can only reach its own data. There is no page or tool, including our own admin dashboard, that lists accounts or shows anyone's classes or notes.
Sign-in emails are rate-limited so nobody can flood your inbox.

Deleting: open "Account" and tap "Delete my account and data." Your email, data and every sign-in session are erased from our server right away. A copy may still be in your browser until you clear it.

Deadline reminders are off unless you turn them on. When on, we email you before deadlines at schools you've saved. Every email has a way to turn them off.

Anonymous activity counts

To see what's working, the site counts things like: visits, how far people get through the class cards, which schools are seen, saved, hidden or opened, which site sent you here, and phone vs computer. Each browser is counted with a random code made on your device and turned into a one-way fingerprint on our server; we never store your IP address. These counts are never linked to your account or email.

Who else handles data

Vercel runs the website and server code.
Upstash hosts the database (encrypted account data and anonymous counts).
Resend delivers sign-in and reminder emails, so it handles your email address and those emails.

Who TrackRx is for

TrackRx is meant for high school and college students and career changers exploring health programs. It isn't directed at children under 13, and we don't knowingly create accounts for them.

Accuracy

Prerequisite rules come from each school's own pages, with a link on every rule. Schools change their requirements, so always confirm with the school before you apply.

Questions or requests

Email hello@gettrackrx.com. We'll answer within a few days.