Privacy Policy for Trace

Effective Date: June 16, 2025

Privacy at a Glance

We believe in transparency. Here’s a simple summary of our privacy promise.

We NEVER collect your content. The text of your clips and stashes is yours alone and remains on your device.
We PLAN to collect ANONYMOUS data. To improve Trace, we intend to collect non-personal usage statistics (e.g., feature popularity).
You will have full control. When analytics are introduced, you will have a clear and simple option to opt-out.
We use minimal permissions. We only request permissions essential for Trace to function.
We do not sell your data. We are not in the business of selling user data.

1. Introduction

Welcome to Trace ("we," "us," "our"). We are committed to protecting your privacy and handling your data in an open and transparent manner. This Privacy Policy explains how we handle information in connection with our Trace browser extension (the "Service").

This policy is designed to comply with major global privacy regulations, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA) as amended by the CPRA, Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), and India's Digital Personal Data Protection Act (DPDPA).

2. Who We Are

For the purpose of data protection laws, the data controller is:
Trace App
Contact Email: shreyanshpandey@protonmail.com

3. Information We Collect and Why

We believe in data minimization. We only process information that is necessary to provide and improve the Service.

3.1. Your Content Data (What We DON'T Collect)

The content of your clips and stashes is never collected, transmitted, or stored by us. This data is processed and stored locally on your device within your browser's secure storage. We have no access to it. This is a core principle of our design.

3.2. Personal Information

We do not require you to create an account to use Trace. The core Service does not collect any Personal Information that directly identifies you, such as your name, email address, or physical address.

The only exception is if you voluntarily contact us for support via email, in which case we will use your email address solely to communicate with you about your query.

3.3. Anonymized and Aggregated Usage Data (Future Collection)

To help us improve the Service, fix bugs, and prioritize new features, we plan to collect anonymized and aggregated usage data in a future version of Trace. This data is non-personal and cannot be used to identify you. It will include:

• Feature Engagement: How often core features (e.g., "mark," "stash," "search") are used.
• Performance Metrics: Extension load times and search speed to help us identify and fix bottlenecks.
• System Information: Browser type/version and operating system to ensure compatibility and diagnose issues.

Crucially, you will have the ability to opt-out of this data collection. This option will be clearly presented in the extension's settings.

4. Legal Basis for Processing

Under GDPR, we must have a legal basis to process data. For the future collection of Anonymized and Aggregated Usage Data, our legal basis will be:
• Legitimate Interest: We have a legitimate interest in understanding how our Service is used so we can improve it for all users. We ensure this interest is balanced against your rights and freedoms by only collecting non-personal, anonymized data and by providing a clear opt-out.
• Consent: By providing a clear opt-out mechanism, we are also empowering you to grant or withdraw your consent for this processing.

5. Your Data Protection Rights

You have rights concerning your information under various privacy laws. We are committed to upholding these rights for all users, regardless of location.

• The Right to Be Informed: This policy informs you of our data practices.
• The Right of Access: Since we don't store your personal data, this right is limited. You can access your Content Data locally within your browser.
• The Right to Rectification: You can correct or update your Content Data locally.
• The Right to Erasure (Deletion): You can delete your Content Data at any time by clearing the extension's storage or uninstalling it.
• The Right to Withdraw Consent / Opt-Out: You will have the right to opt-out of our future anonymous data collection at any time.
• The Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection authority if you have concerns about our practices.

To exercise any rights or if you have questions, please contact us at shreyanshpandey@protonmail.com.

5.1. Region-Specific Rights

For users in California (CCPA/CPRA): We do not "sell" or "share" personal information as defined by the CCPA. The rights listed above cover your rights under California law.

For users in the EEA, UK, and Switzerland (GDPR): The rights listed above are your primary rights under GDPR.

For users in Canada (PIPEDA): This policy is intended to comply with PIPEDA's principles of accountability, consent, and openness. You have the right to access your information and challenge our compliance with the Privacy Commissioner of Canada.

For users in India (DPDPA): We act as the "Data Fiduciary." You have the rights outlined above. For any grievances, please contact our Grievance Officer at shreyanshpandey@protonmail.com.

6. Data Security and Retention

We are committed to data security. All your Content Data is stored locally on your device. For any future anonymous data collection, we will use reputable third-party analytics services that employ industry-standard security measures, including encryption in transit and at rest. We will only retain this aggregated data for as long as it is necessary for the purpose of product improvement.

7. Children's Privacy

Our Service is not directed to individuals under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect any personal information from children. If we become aware that we have inadvertently collected such information, we will take steps to delete it.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and, if applicable, through a notice within the extension or on the extension's store listing. We encourage you to review this policy periodically.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please do not hesitate to contact us:

Trace Grievance Officer / Data Protection Contact
shreyanshpandey@protonmail.com