Privacy

Trace Press makes your book inside your browser. The words, names and settings you choose, and the PDFs it makes, stay on your computer. Here is everything that does leave it, and who sees it.

What stays on your computer

• Every name and practice word you type, every setting, the preview and the PDFs. The book is drawn by code running in your browser; nothing is uploaded to make it.
• After you unlock, your browser keeps a note of it in local storage (tracepress.license: your email and a reference to your payment) so you don't have to unlock again. Clearing this site's data removes it.
• The first time you open a page of this site, your browser keeps a one-word note of where you came from in local storage (tracepress.src): the site that linked here, such as google_com, or the page of this site you came from, or direct. Not the search you typed, and not a full address. Clearing this site's data removes it.

Trace Press sets no cookies and has no accounts.

What your browser sends

• Page requests. Like any website, the pages, scripts, fonts and sample PDFs are fetched from this site, which runs on Cloudflare. Cloudflare logs each request with your IP address, browser name and the address asked for. We read that log to count visits and to tell people from robots, and that includes looking up which network an address belongs to.
• Step counters. As you use the generator, the page fetches tiny empty images named after a step, such as /px/ran.gif, /px/touched.gif (changed a setting), /px/download.gif and /px/pay.gif, each at most once per page load. The file name is the whole message: no name or word you typed, no setting, no ID. That is how we know how many people get as far as each step.
• Cloudflare Web Analytics. Each page loads Cloudflare's analytics script, which reports the page viewed, the page you came from and how fast it loaded. Cloudflare describes it here.

If you pay

• Payment happens on Stripe's checkout page, not here. Stripe handles your card and what its checkout asks for under Stripe's privacy policy. We see the payment record in Stripe, including your email address. We never see your card number.
• The Buy link carries that one-word note to Stripe (as client_reference_id=src-google_com, for example), so the payment record says which site or page led to the sale.
• To unlock, the email you type is sent to this site's server, which asks Stripe whether that email has a completed Trace Press payment and answers yes or no. The server doesn't store the email.

Questions

Email support@bananafest-destiny.com.

The site's code is public, so you can check all of this yourself: github.com/walkertbrown/vibe-cider (the tracepress folder).