Privacy Policy for crypto-trace.app
This policy explains what data we collect, why we collect it, and how it is used and protected. It applies to this website and the CryptoTrace Windows application.
Who we are
CryptoTrace operates crypto-trace.app and the CryptoTrace Windows app. Contact: hello@crypto-trace.app.
Data we collect
- Email you provide for trial tokens, downloads, and purchases.
- Payment details handled by Stripe (we never store card numbers).
- Transactional email metadata via our email provider.
- Server logs (IP, user-agent, request path) for security and debugging.
- Analytics with Google Analytics 4, only after you click Accept on the cookie banner.
How we use data
- Provide downloads, issue licenses, process payments, send transactional emails.
- Improve reliability, performance, and security.
- Measure usage (GA4) only with consent.
Legal bases (GDPR)
- Contract (to deliver the app/license you requested)
- Consent (analytics cookies and optional communications)
- Legitimate interests (site security and fraud prevention)
- Legal obligation (tax/accounting records)
Retention
We keep data only as long as necessary for the purposes above. Some records (e.g., payments/licenses) may be retained to meet legal requirements.
Sharing
We do not sell your data. We use processors strictly to provide the service: Stripe (payments), Vercel (hosting), our email provider (transactional email), and Google (analytics if consented).
International transfers
Data may be processed outside your country. We use reputable providers and appropriate safeguards where applicable.
Security
We use HTTPS, access controls, and industry-standard protections. No method is 100% secure, but we work to protect your data.
Your rights
Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, and data portability. Contact us at hello@crypto-trace.app.
Cookies
- Essential: required for site operation and to remember your cookie choice (stored locally).
- Analytics: GA4 only after you click Accept.
Contact
Local records and checks
Saved scans, comparison baselines, named cases and repeat-check settings stay in the app's local data folder. Records can contain paths, evidence metadata, identity hashes, coverage and user-entered case notes; raw detected secret values are not automatically saved. Notes and exported reports may include information you enter, so do not enter passwords, keys or recovery phrases.
Backup checks read the selected file. Supported known-password tests use the password locally, clear the input and discard decrypted buffers without displaying or saving the key. Daily/weekly checks are opt-in, limited to the chosen source and run while the app is open. Scan and credential contents are not sent to a validation service.
The optional public Bitcoin activity check sends only the selected public address to Blockstream after consent. Existing Trial first-open/first-use telemetry can send anonymous install ID, app version, OS and timestamps, not scan contents or local paths. Website consent and payment-processing practices are unchanged.
App updates
The update checker compares the installed version locally with public release information. Startup checks are optional and disabled by default; if enabled, one check runs each time the app opens.
Manual checks, and startup checks if enabled, contact crypto-trace.app over HTTPS. The host receives your IP address and request metadata. No install ID, license, paths or scan contents are sent. Downloads and installation are manual.