Privacy Policy

VisaTracker (visatracker.com.au) helps people track and compare Australian visa processing times. This policy explains what personal information we collect, why we collect it, and how we handle it. We aim to comply with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

In short: we collect the minimum we need to run the service, we don't sell your data, and you can ask us to delete your account and information at any time.

Information we collect

Account information. When you create an account we collect your email address. If you sign in with Google, we also receive your name and profile picture from Google. We never see or store your Google password.

Visa tracking information. Details you choose to submit about your visa application - such as visa subclass, lodgement date, and milestone dates - so we can show you timelines and aggregate processing statistics.

Technical information. Standard log data such as browser type, device type, and pages visited, used to keep the site working and understand general usage patterns.

How we use your information

• To create and manage your account and sign you in securely.
• To display your visa timeline and milestones back to you.
• To produce anonymised, aggregated processing-time statistics shared with the VisaTracker community. Individual submissions are never shown in a way that identifies you.
• To maintain, secure, and improve the service.

We do not sell your personal information, and we do not use it for third-party advertising.

How your information is stored

Account and visa tracking data is stored with Supabase, our authentication and database provider, on infrastructure that may be located outside Australia. Data is encrypted in transit (HTTPS) and at rest. Access to the database is restricted and protected by row-level security, meaning your personal records are only accessible to your own signed-in account.

Third-party services

We rely on a small number of service providers to operate the site:

• Supabase - authentication and database hosting.
• Google - optional "Sign in with Google" authentication, governed by Google's Privacy Policy.
• GitHub Pages - website hosting, which may log standard technical request data.

These providers only receive the information necessary to perform their function.

Cookies and local storage

We use cookies and browser storage only for essential purposes - keeping you signed in and remembering your session. We do not use advertising or cross-site tracking cookies.

Your rights and choices

• Access and correction - you can view and edit your submitted information from within your account at any time.
• Deletion - you can request deletion of your account and all associated personal information by contacting us. We will action deletion requests within 30 days.
• Withdraw Google access - you can revoke VisaTracker's access to your Google account at any time via your Google account permissions.

Data retention

We keep your information while your account is active. If you delete your account, your personal information is removed from our systems; anonymised, aggregated statistics that cannot identify you may be retained to preserve community processing-time data.

Children

VisaTracker is not directed at children under 16, and we do not knowingly collect personal information from them.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected in the "Last updated" date above, and significant changes will be flagged on the site.

Contact us

For privacy questions, access or deletion requests, or complaints, email us at privacy@visatracker.com.au. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).