Privacy Policy

KB Consulting, Entrepreneur individuel

SIRET: 79866990900037

Email: contact@tracemapper.com

Account data: name, email address, hashed password (or Google account identifier), interface language, plan and trial status, two-factor secret if enabled, and your choice about tips and offers by email. Usage data: traceroute, ping, DNS, HTTP, port and BGP queries you run, together with their results, the source IP of the request, the browser user-agent and connection timestamps. A device fingerprint (computed in your browser) is used solely to enforce free-tier quotas and prevent abuse. Billing: we never see or store your card details: payment is handled by Polar, our merchant of record. Communications: a log of the emails we send you (recipient, subject, type, status, date and content). Security links containing single-use tokens are never stored. Newsletter: your address, and the date and IP address of your sign-up and of your confirmation. Teams: the address of the people you invite. Administrative actions performed on your account are recorded in an audit log with the acting IP address.

Your data is processed for the following purposes:

• Providing the traceroute and network diagnostic service
• Sending the emails your account needs (security, billing, the alerts you set up)
• Sending getting-started tips and offers for our own services, unless you decline them
• Sending the newsletter, if you subscribed to it
• Improving the service and user experience
• Generating anonymous usage statistics
• Ensuring the security and stability of the platform

Performance of the contract (art. 6(1)(b)): your account, the measurements you request, billing, and the emails your account needs (security, billing, the alerts you set up).

Legitimate interest (art. 6(1)(f)): service security and the prevention of abuse and fraud, including free-tier quota enforcement; improving the service; audience measurement, without cookies, to which you can object with the control in the Cookies section; getting-started tips and offers for our own services similar to the one you use, sent to account holders as permitted by article L34-5 of the French Post and Electronic Communications Code: you can decline them when you sign up, then at any time from your account page or with the link in each of them; and the business-to-business prospecting described below.

Consent (art. 6(1)(a)): the newsletter, which you confirm through a link and can leave at any time.

Legal obligation (art. 6(1)(c)): the retention of accounting records.

Traceroute results are kept for up to 12 months, or until you delete them; monitor runs for 90 days. On the free plan only your 10 most recent traces are retained; an account that returns to the free plan (end of a subscription, a Pass or a trial, including after a failed payment) first keeps its whole history for 30 days. Email logs and processed payment events are kept for 90 days, except the records of Pass purchases, kept without limit so that one purchase can never be applied twice; administrative audit logs for 12 months. Expired sessions are purged automatically, sign-ups that never confirm their email address are deleted after 7 days, and team invitations 30 days after they expire. An automated job enforces these limits every night. Database backups are kept for 14 days on our server and 30 days on a second server, where they are encrypted: deleted data disappears from them within 30 days at most. You can delete your account and all associated data at any time from your account page, and export everything we hold about you in JSON from the same place.

You have the right to access, rectify, erase and port your data, to restrict or object to its processing, and to withdraw your consent at any time. You can object at any time to the processing based on our legitimate interest: to audience measurement with the control in the Cookies section, and to tips and offers by email from your account page or with the link in each of them. Two rights are self-service: from your account page you can export everything we hold about you in JSON, and delete your account together with all associated data. For anything else, contact us at the address below: we respond within one month. You may also lodge a complaint with the CNIL (www.cnil.fr) or your national supervisory authority.

We only use strictly necessary cookies: session authentication, theme preference and language choice. No advertising cookie and no third-party tracker is set. Audience measurement runs on Umami, hosted on our own European servers: it sets no cookie, stores no IP address, never leaves our infrastructure and never follows you to another site. It relies on our legitimate interest: because it is limited to measuring our own audience under those conditions, it runs without asking for your consent, and you can object at any time using the control below. Separately, a device fingerprint is computed in your browser to enforce the free plan quotas; it is used neither for advertising nor for cross-site tracking.

Your data is hosted in the European Union: Hetzner Online GmbH (Falkenstein, Germany) for the application, database and analytics, and OVH SAS (Gravelines, France) for our secondary measurement agent. Some processors we rely on operate outside the EEA, and those transfers are covered by the European Commission's Standard Contractual Clauses: Polar Software Inc. (United States) as merchant of record for payments and invoicing; Resend (United States) for the delivery of our emails (account emails, tips and offers, the newsletter, and prospecting from a separate account); IPinfo.io (United States) for IP geolocation and network operator lookup; Globalping / jsDelivr for the optional worldwide measurement probes, which receive only the target address you enter; Cloudflare for DNS resolution of our domain. OpenAI (United States) is used solely to translate our own blog articles and never receives customer data. We do not sell or rent your personal data. The cloud latency test runs in your own browser: when you start it, your browser connects directly to the public test servers of AWS, OVHcloud, Vultr and Akamai (Linode), which receive your IP address as with any web request. The results stay in your browser and are not sent to us.

If you subscribe to the newsletter from the footer of the site, we use your email address to send it to you, on the basis of your consent (art. 6(1)(a)).

Double opt-in: nothing is sent to you until you click the link in the confirmation email (valid for 7 days), then the button on the page it opens. As proof of your consent, we keep the date and IP address of your request and of your confirmation.

Retention: until you unsubscribe for a confirmed subscription; a subscription that is never confirmed is deleted 30 days after the latest request.

Unsubscribing: the link in every issue, at any time, effective immediately. An account that declines tips and offers by email no longer receives the newsletter either. The emails are delivered by Resend (see above).

We contact by email companies whose business relates to networks (managed IT services, hosting, telecoms, web agencies), once, with at most one follow-up.

Controller for this processing: KB Digital Services LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, United States.

Data processed: the company's name and business contact details (address, phone number, website, rating and number of reviews) taken from its Google Maps listing, obtained from DataForSEO; the generic email address the company publishes on that listing or on its website; and the results of our own measurements of its domain (public SPF and DMARC DNS records, HTTPS certificate, network trace to its website).

Legal basis: legitimate interest (art. 6.1.f) in making known a service related to the company's business, in line with the CNIL's recommendations on business-to-business prospecting.

Recipient: the emails are delivered by Resend (United States), from an account and a domain separate from the service's.

Retention: 1 year from collection for a company never contacted; for a contacted company, 3 years from collection or from your last reply, whichever is later. An objection is kept indefinitely, for the sole purpose of never contacting you again. Likewise, an address that bounced and a record we deleted leave only what is needed never to take them up again: the Google Maps listing identifier, the domain and a non-reversible fingerprint of the address.

Objection: the link included in every email, a "stop" reply, or a message to contact@tracemapper.com. You also have the rights of access, rectification and erasure described above.

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.

For any privacy-related questions or to exercise your rights, contact us at contact@tracemapper.com.