Skip to content

Privacy Policy

TraceMapper is committed to protecting your privacy. This policy explains how we collect, use, and protect your personal data in compliance with the General Data Protection Regulation (GDPR).

Last updated: July 2026

Data Controller

KB Consulting, Entrepreneur individuel

SIRET: 79866990900037

Email: contact@tracemapper.com

Data Collected

Account data: name, email address, hashed password (or Google account identifier), interface language, plan and trial status, two-factor secret if enabled. Usage data: traceroute, ping, DNS, HTTP, port and BGP queries you run, together with their results, the source IP of the request, the browser user-agent and connection timestamps. A device fingerprint (computed in your browser) is used solely to enforce free-tier quotas and prevent abuse. Billing: we never see or store your card details: payment is handled by Polar, our merchant of record. Communications: a log of the emails we send you (recipient, subject, type, status and date). Security links containing single-use tokens are never stored. Administrative actions performed on your account are recorded in an audit log with the acting IP address.

Purpose of Data Processing

Your data is processed for the following purposes:

  • Providing the traceroute and network diagnostic service
  • Improving the service and user experience
  • Generating anonymous usage statistics
  • Ensuring the security and stability of the platform
  • Legal Basis

    Performance of the contract (art. 6(1)(b)) for your account, the measurements you request and billing. Legitimate interest (art. 6(1)(f)) for service security, abuse and fraud prevention including free-tier quota enforcement, and for improving the service. Consent (art. 6(1)(a)) for audience measurement and for non-transactional emails, which you can withdraw at any time from your account page or via the unsubscribe link in every such email. Legal obligation (art. 6(1)(c)) for the retention of accounting records.

    Data Retention

    Traceroute results are kept for up to 12 months, or until you delete them. On the free plan only your 10 most recent traces are retained. Email delivery logs and processed payment events are kept for 90 days, administrative audit logs for 12 months, and expired sessions are purged automatically. Sign-ups that never confirm their email address are deleted after 7 days. An automated job enforces these limits daily. You can delete your account and all associated data at any time from your account page, and export everything we hold about you in JSON from the same place.

    Your Rights

    You have the right to access, rectify, erase and port your data, to restrict or object to its processing, and to withdraw your consent at any time. Two of these are self-service: from your account page you can export everything we hold about you in JSON, and delete your account together with all associated data. For anything else, contact us at the address below: we respond within one month. You may also lodge a complaint with the CNIL (www.cnil.fr) or your national supervisory authority.

    Cookies

    We only use strictly necessary cookies: session authentication, theme preference and language choice. No advertising cookie and no third-party tracker is set. Audience measurement runs on Umami, hosted on our own European servers: it sets no cookie, stores no IP address, never leaves our infrastructure and never follows you to another site. Because it is limited to measuring our own audience under those conditions, it runs without asking for your consent, and you can object at any time using the control below. Separately, a device fingerprint is computed in your browser to enforce the free plan quotas; it is used neither for advertising nor for cross-site tracking.

    Hosting & Data Transfers

    Your data is hosted in the European Union: Hetzner Online GmbH (Falkenstein, Germany) for the application, database and analytics, and OVH SAS (Gravelines, France) for our secondary measurement agent. Some processors we rely on operate outside the EEA, and those transfers are covered by the European Commission's Standard Contractual Clauses: Polar Software Inc. (United States) as merchant of record for payments and invoicing; Resend (United States) for transactional email delivery; IPinfo.io (United States) for IP geolocation and network operator lookup; Globalping / jsDelivr for the optional worldwide measurement probes, which receive only the target address you enter; Cloudflare for DNS resolution of our domain. OpenAI (United States) is used solely to translate our own blog articles and never receives customer data. We do not sell or rent your personal data.

    Changes to This Policy

    We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.

    Contact

    For any privacy-related questions or to exercise your rights, contact us at contact@tracemapper.com.