Privacy Policy

Trace ("we", "us", "our") operates the traceclick.io website and the Trace mobile attribution platform, including the API, SDKs, CLI, and related services (collectively, the "Service").

This Privacy Policy explains how we collect, use, store, and protect information when you use our Service. It applies to two categories of people:

• Customers — developers and companies who integrate Trace into their mobile apps.
• End Users — people who install and use apps that have integrated the Trace SDK.

2.1 From Customers (Account Data)

• App name, bundle identifier, and package name
• API keys (hashed at rest)
• Billing information (processed by Stripe; we do not store card numbers)
• Email address (for support and billing correspondence)

2.2 From End Users (Attribution Data)

When an end user clicks a Trace link or opens an app with the Trace SDK, we collect:

• IP address — immediately hashed using SHA-256 with a per-app salt and global pepper. Raw IP addresses are never stored.
• User agent string — browser or app identifier
• Device model and OS version
• Screen dimensions
• Locale and timezone
• Platform — Android or iOS
• Install referrer — provided by the app store (Android only)

We do not collect names, email addresses, phone numbers, advertising identifiers (IDFA/GAID), or precise geolocation from end users.

2.3 From the Website

The traceclick.io website does not use cookies for tracking or analytics. We do not use third-party analytics services on the website.

• Install attribution — matching app installs to the marketing link that drove them, using deterministic (click ID, install referrer) and probabilistic (fingerprint) methods.
• Deferred deep linking — routing users to specific in-app content after install.
• Fraud detection — identifying click flooding, device farms, and other invalid traffic.
• Webhook delivery — notifying customers about attribution events.
• Billing and support — processing payments and responding to customer inquiries.

For customers in the European Economic Area (EEA), we process data under the following legal bases:

• Contract performance — processing account data to provide the Service (Article 6(1)(b)).
• Legitimate interest — processing hashed attribution data to provide install measurement and fraud detection (Article 6(1)(f)). We mitigate privacy impact by hashing IPs on ingestion and enforcing data retention limits.

Trace acts as a data processor on behalf of our customers (data controllers). The relationship is governed by our Data Processing Agreement.

Attribution data is retained based on the customer's pricing tier:

After the retention window, personally identifiable fields (user agent, device model, screen dimensions, locale, timezone, and IP hash) are automatically nullified. Anonymized aggregate data may be retained indefinitely.

Unattributed clicks are automatically purged after 7 days regardless of tier.

End users and customers have the following rights:

• Right to access — request a copy of data we hold. Available via the API (POST /v1/privacy/export) or the CLI (trace privacy export).
• Right to erasure — request deletion of all associated data. Available via the API (POST /v1/privacy/erase) or the CLI (trace privacy erase). Erasure requests are processed within 15 minutes.
• Right to restrict processing — customers can disable tracking for their app at any time.
• Right to data portability — export data in JSON format via the API or CLI.

To exercise these rights, contact us at privacy@traceclick.io or use the API/CLI directly.

• IP addresses are hashed using SHA-256 with per-app salts before storage. Raw IPs are never persisted.
• All data in transit is encrypted via TLS 1.2+.
• Database access is restricted by Row-Level Security policies scoped to individual apps.
• API keys are required for all data access.
• Audit logs track all sensitive operations (data access, erasure, key rotation) and are tamper-proof (insert-only).

We use the following sub-processors to provide the Service:

We maintain Data Processing Agreements with each sub-processor. Customers are notified of sub-processor changes via email.

Trace supports region pinning. Customers can choose to have their data processed exclusively in the United States or the European Union. The data region is set when creating an app and is enforced at the API level — requests for an EU-pinned app sent to the US API (and vice versa) are rejected.

The Service is not directed at children under 13 (or under 16 in the EEA). We do not knowingly collect data from children. If you believe a child's data has been collected, contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify customers of material changes via email. The "Effective date" at the top of this page indicates when the policy was last revised.

For privacy-related questions or requests:

• Email: privacy@traceclick.io
• API: POST /v1/privacy/erase and POST /v1/privacy/export
• CLI: trace privacy erase and trace privacy export