Privacy Policy | TraceNone

1. Introduction

TraceNone is a product by JPCoding. JPCoding ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect information when you use our secret sharing service. By using TraceNone, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Secrets You Share: When you create a secret through our service, we collect and store the encrypted content of your secret message. Secrets are encrypted using AES-256-GCM encryption with a dual-key system before storage.

Optional Passwords: If you choose to protect your secret with a password, we store a hashed version of the password using bcrypt. We cannot retrieve your original password from this hash.

Technical Data: We may collect minimal technical information such as IP addresses and timestamps for security and operational purposes. This data is not linked to your identity or the content of your secrets.

3. How We Use Your Information

We use the information we collect solely to:

Provide and maintain our secret sharing service
Encrypt and securely store your secrets
Enable one-time retrieval of secrets by authorized recipients
Ensure security and prevent abuse

We do not use your information for advertising, marketing, or analytics purposes.

4. Encryption and Security

All secrets are encrypted using AES-256-GCM encryption with a dual-key system:

Client Unlock Key: Generated on your device and embedded in the shareable link
Server Encryption Key: Generated on our server and encrypted with a master key

We cannot decrypt your secrets without the unlock key that you control. Server encryption keys are protected with a master encryption key stored securely in our environment.

5. Data Retention and Deletion

Automatic Deletion: Secrets are permanently deleted immediately after they are retrieved by the recipient. This is a hard delete from our database with no recovery possible.

No Backups: We do not maintain backups of secrets. Once deleted, secrets cannot be recovered.

No Logs: We do not log the content of secrets or maintain access logs that could reveal secret content.

6. No Tracking or Analytics

We do not use tracking cookies, analytics services, or any third-party tracking tools. We do not create user accounts or profiles. We do not track your browsing behavior or share your information with third parties.

7. Third-Party Services

Our service uses PostgreSQL for database storage. All data stored in the database is encrypted. We do not share your information with any other third-party services.

8. Your Rights

You have the right to:

Not use our service if you do not agree with this privacy policy
Not create secrets with sensitive information if you prefer not to use server-side storage
Protect your secrets with optional passwords for additional security

Since secrets are automatically deleted after retrieval and we do not maintain user accounts, we cannot provide access to or deletion of specific secrets after they have been created. However, secrets are automatically deleted after one-time use.

9. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with information, please contact us.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us through email at support@tracenone.app. JPCoding is a sole trader business.

Data Protection Registration: JPCoding is registered with the UK Information Commissioner's Office (ICO). Registration number: ZC033155.