Privacy Policy

Trace (gettrace.uk) provides website behaviour analytics and a macOS app. For purchases and account data, we act as the data controller. For visitor data collected via the Trace script on your website, you are the controller and Trace is the processor — see our Data Processing Agreement.

• Clicks, hovers, and scroll depth
• Page URL and viewport size
• Pseudonymous visitor and session identifiers stored in localStorage (not third-party cookies)
• Timestamps and technical metadata needed to align heatmaps
• Session replay snapshots with all form inputs masked

• Passwords or payment card numbers entered on your site
• Contents of form fields (inputs are masked in replay; we do not store field values)
• Cross-site advertising profiles or marketing cookies

Our marketing site may load Trace analytics only after you consent. We also use Stripe for checkout and may send transactional email. See our Cookie & Storage Policy.

Purchases on gettrace.uk are processed by Stripe. Stripe handles card details; we receive customer email, payment status, and Stripe identifiers needed to fulfil your license.

We use Supabase (database and storage), Vercel (hosting), Resend (email), Stripe (payments), and optionally Cloudflare R2 (protected app downloads). They process data on our instructions. A full list is in our DPA.

Analytics events and screenshots are retained for up to 90 days unless you delete a site or your account sooner. Purchase records may be kept longer where required for tax, fraud prevention, or legal obligations. Deleted accounts are anonymised and associated analytics data is removed.

If you track visitors in the UK, EEA, or other regulated regions, you are responsible for lawful basis, privacy notices, consent or legitimate-interest assessments, and storage disclosures where required. Trace provides analytics tools; you control which sites you instrument.

• Access, rectification, erasure, restriction, and portability where applicable
• Object to processing based on legitimate interests
• Withdraw consent at any time (where processing is consent-based)
• Lodge a complaint with the ICO (ico.org.uk) or your local supervisory authority

Delete your license, sites, and associated event data from the Trace Mac app (Settings → Delete account) or email hello@gettrace.uk. For a copy of your data, email the same address from your license email. We respond within 30 days.