Privacy Policy
Last updated: July 17, 2026
Introduction
TraceMind is a Chrome extension designed to help you find and revisit pages TraceMind has captured. We understand that privacy is paramount, especially when it comes to your browsing history. This Privacy Policy explains how we handle your data and our unwavering commitment to keeping your personal information safe and secure.
Our core principle is simple: your data belongs to you. Core capture, indexing, storage, search, screenshots, and analytics run locally on your device. Optional Pro Chat sends your question, prior turns in the current chat, and selected matching excerpts, titles, and URLs directly to the AI provider you choose with your own API key. TraceMind does not proxy or store those requests. This policy explains exactly what data we collect, how we use it, and what we do NOT collect. We believe transparency is essential for building trust.
Data the Extension Collects
The core history features of the TraceMind extension operate on your local device. When you use the extension, it stores the following information locally:
Browsing history metadataincludes URLs and page titles from the websites you visit, along with timestamps of when you visited them. This is stored in your browser's local storage so you can search through your history later.
Page text content is extracted and indexed locally so you can search your history by what a page actually said, not just its title. This is the core feature of TraceMind; page content is not uploaded to TraceMind for indexing or search. Optional Chat has the separately disclosed provider boundary below.
AI semantic embeddings are numerical representations of page meaning, generated entirely on your device using a local AI model. These enable natural language search and are stored alongside your history in local storage.
Page screenshotsare captured as thumbnail images when you visit websites. These visual snapshots help you recognize pages you've seen before and are also stored locally on your device.
Search queries that you make within the extension are stored locally to enable full-text search functionality and to remember your recent searches.
User preferences and settings such as your search filters, display preferences, and extension configurations are stored locally to personalize your experience.
⚠️ Important: This data is stored exclusively on your device for indexing and search. It is never transmitted to our servers or any third party for those purposes. The one exception is the optional Pro Chat feature (off by default), which, only after you enable it, sends current Chat turns and matched page snippets directly to the AI provider you configure. See Chat & External AI below.
Data the Website Collects
When you visit our website or purchase a license for TraceMind, we collect limited information necessary to provide our services. This data is distinct from what the extension stores locally on your device.
Email address is collected when you purchase a Pro license or sign up for updates. We use your email to deliver your license key, send payment receipts, and keep you informed about important product updates and security notices.
Payment information is processed securely by Paddle, our payment processor. We never see, store, or have access to your full credit card numbers. Paddle handles all payment details according to their security standards and compliance requirements.
License validation requests send your license key and a timestamp to our servers to verify that your Pro license is valid and active. This is necessary to unlock premium features in the extension. We only store the fact that a license exists and its expiration date, never any browsing data associated with it.
Data We Do NOT Collect
It's just as important to explain what we do NOT collect. Here's what you can be assured we will never gather:
We do not receive or store your page content on our servers. The extension indexes page text locally on your device for search purposes, and this data is never transmitted to us for indexing or search. It is never sent to any third party either, with one exception you control: if you turn on the optional Pro Chat feature, current Chat turns and short snippets of matching pages are sent directly to the AI provider you configure (see Chat & External AI below).
We do not collect passwords, form inputs, or any personal information that you enter on websites. Your sensitive data stays within your browser and is completely inaccessible to us.
We do not collect cookies from websites you visit. The extension does not track or intercept cookies from third-party websites.
We do not store your browsing history on our servers. All browsing data remains on your device in your local browser storage.
We do not sell any data to third parties. Your information will never be monetized or shared with advertisers, data brokers, or any other companies for their benefit.
Third-Party Services
To provide TraceMind, we work with a few trusted third-party service providers. Each of these services has its own privacy policy that governs how they handle data. Here's what each service does:
Paddle is our payment processor. When you purchase a Pro license, your payment information is handled entirely by Paddle. We never receive or store your credit card details. Paddle is PCI-DSS compliant and follows strict security standards. Learn more about how Paddle handles your data at Paddle's Privacy Policy.
Resend is our email delivery service. When we send you a license key or important updates, Resend delivers the email on our behalf. Resend does not use your email address for any purpose other than delivering our messages. See Resend's Privacy Policy for more details.
Vercelis our website hosting provider. Your connection to our website is served through Vercel's infrastructure. Vercel's privacy practices are described at Vercel's Privacy Policy.
Google Analytics is optional website analytics. It loads only after you select Accept in our analytics consent notice. We use it to understand aggregated page views, referral sources, and basic device and browser information so we can improve the website. We do not use Google Analytics for advertising, cross-site tracking, or to collect your extension browsing history.
Google may process this information on servers outside your country, including in the United States, under the safeguards described in Google's Privacy Policy. Google Analytics event data is retained according to the retention setting for our Analytics property and is used only for the site improvement purposes described above.
License database (self-hosted). License information is stored in our own PostgreSQL database running on our own server, not with an external database provider. We only store your license key, expiration date, and email address there, never any of your browsing history or extension data. The database is not exposed to the internet, and nightly backups stay on infrastructure we control.
Chat & External AI (Optional Pro Feature)
TraceMind includes an optional Pro feature called Chat with your history. It is off by default and only becomes active after you enable it and pass a consent screen. This is the only feature that can send any of your data off your device, and it does so only to an AI provider you choose, using an API key you provide.
What is sent, and to whom. When you ask a question in Chat, TraceMindsearches your history locally and sends your question, prior turns in the current Chat, plus selected excerpts, titles, and URLs from matching pages directly from your browser to the AI provider you configured. This request goes straight to that provider, never through our servers. We never see your question, your history, or the AI's answer.
Bring your own key.Chat uses an API key that you obtain from and pay to the provider directly. Your key is stored locally on your device, is never sent to us, and is never included in exports or backups. Keys are not protected by TraceMind's optional passphrase encryption. Chat data is never used for indexing or search.
Providers.You choose one of the following. When you use Chat, current Chat turns and matched snippets are governed by that provider's privacy policy for that request:
OpenAI: see OpenAI's Privacy Policy. Anthropic: see Anthropic's Privacy Policy. Google Gemini: see Google's Gemini API terms and privacy.
If you never enable Chat, none of the above applies and no page data ever leaves your device.
How We Use Your Information
We use the information we collect only for specific, legitimate purposes. Here's how we use each type of data:
Email address is used to send you your license key after purchase, provide payment receipts for your records, deliver important product updates and security notifications, and respond to customer support inquiries. We will never use your email for marketing purposes without your consent, and you can opt out of non-essential communications at any time.
License data is used solely to verify that you have a valid Pro license and to unlock Pro features in your extension. When you use the extension, it periodically checks with our servers to confirm your license is still active.
Analytics on our website help us understand how visitors use our site so we can improve the user experience. We collect this information only after you consent. You can change your choice at any time through Analytics settingsin the site footer.
Data Retention
We retain data only for as long as necessary to provide our services. Here's our data retention policy:
Local extension data including your browsing history, screenshots, and search queries follows the retention setting in the extension. New installations default to keep forever. You can choose a shorter retention window; saved pages are not auto-pruned. Browser storage capacity still applies. You can also delete it manually or by uninstalling the extension.
License records are retained for the duration of your subscription plus 30 days after it expires, in case you renew your subscription. After 30 days of inactivity, your license record is deleted from our database.
Email addresses are retained for as long as you maintain a license or subscription with us. If you request deletion of your account, we will remove your email address from our systems within 30 days.
Your Rights
Under privacy regulations including the EU's General Data Protection Regulation (GDPR) and similar laws in other jurisdictions, you have the following rights regarding your personal data:
Right of Access: You have the right to request a copy of all personal data we hold about you.
Right to Deletion: You can request that we delete all your personal data from our systems. We will comply within 30 days, except where we are legally required to retain certain information.
Right to Correction: If any data we hold about you is inaccurate, you have the right to request correction.
Right to Data Portability: You can request your data in a portable, machine-readable format so you can transfer it to another service provider if you wish.
Right to Object: You have the right to object to the processing of your personal data in certain circumstances.
To exercise any of these rights, please email us at support@tracemind.app with your request. Please include as much detail as possible to help us locate your data quickly. We will respond to your request within 30 days.
Data Security
We take the security of your data seriously and implement industry-standard measures to protect your information:
All communications between your browser and our website are encrypted using HTTPS (SSL/TLS protocol). This means your data is encrypted in transit and cannot be intercepted by unauthorized parties.
License keys are cryptographically signed using Ed25519 digital signatures, which means they cannot be forged or tampered with. If someone tries to modify a license key, the signature verification will fail and the license will be rejected.
Local browser storage; no TraceMind passphrase encryption. Optional passphrase encryption for local content and new encrypted backups (AES-256-GCM).Browser and operating-system protections still apply, but they are not a substitute for enabling TraceMind's optional Pro passphrase.
Our databases and servers are protected by firewalls, access controls, and regular security monitoring. We do not expose our servers directly to the internet and follow industry best practices for infrastructure security.
However, no security system is perfect. If you believe your account or data has been compromised, please contact us immediately at support@tracemind.app.
Children's Privacy
TraceMindis not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information and terminate the child's account immediately. If you believe a child under 13 has created an account or provided information to us, please contact us at support@tracemind.app.
Changes to This Policy
We may update this Privacy Policy from time to time as our services evolve or as required by law. When we make changes, we will update the "Last updated" date at the top of this page. For material changes that significantly affect how we handle your data, we will notify you via email or through an in-app notice before the changes take effect. Continued use of TraceMind after such changes means you accept the updated Privacy Policy.
Contact Us
If you have questions about this Privacy Policy, concerns about how we handle your data, or if you wish to exercise your privacy rights, please contact us:
Email: support@tracemind.app
We aim to respond to all privacy inquiries within 7 business days. If you have not received a response within 30 days, you may have the right to lodge a complaint with your local data protection authority.