This site collects almost nothing

This website

These pages are static files. There is no account, no login, no tracking pixel, no advertising network and no third-party analytics script. Nothing on this site profiles you, and no data about your visit is sold or shared.

• Cookies: none. The one thing stored in your browser is your colour-theme preference, kept in local storage so the site does not flash the wrong theme on your next visit. It never leaves your device and you can clear it at any time.
• Server logs. Our host records ordinary request information — IP address, user agent, the page requested — as any web server does, for delivery and abuse prevention. We do not use it to build a profile of you.
• Links out. Downloads and source links point at GitHub, which has its own privacy policy and which we do not control.

The product, when you run it yourself

The rendezvous server, relay, auth backend, console and database are all yours, and your sessions, users, devices and audit logs never reach us. There is no telemetry, no usage reporting, and no licence check calling home — the software does not contact us at all, and the update channel is disabled in the builds we publish.

That also means we cannot recover your data, see your logs, or reset an account for you. Your deployment is genuinely yours, including the parts of that which are inconvenient.

The product, when we manage it for you

On a managed plan we operate that same stack on infrastructure we administer, as your processor. We hold the database that stores your users, devices, grants and audit log, and our engineers have the administrative access required to patch, back up and restore it. We use that access to run the service and to answer your support requests, and for nothing else.

What does not change: a remote session is encrypted end to end between the two devices, with keys no server holds. Operating your deployment does not let us watch a session, and it never will — that is a property of the protocol rather than a promise about our conduct.

You can take the deployment with you. On request we hand over the database and the configuration and delete our copies; ask before you sign, not after.

If you email us

We keep the correspondence, because that is what email is. We use it to answer you and, if you become a customer, to do business with you. We do not add you to a mailing list you did not ask for.

Your rights

If you are in a jurisdiction with data-protection rights — access, correction, deletion, objection — exercise them by writing to hello@tracemote.com. Given how little we hold, most such requests are quick.

Changes

If this policy changes materially, the date at the top changes with it. See also the terms.