1What Trace sets
Trace sets one first-party cookie, _tr, on your own domain. It holds a random identifier so visits from the same browser can be joined into a journey, and nothing else: no name, email or payment detail. That identifier still counts as personal data under UK GDPR, which is why this policy covers it and why a visitor can ask for it to be erased.
2No third-party cookies
Trace never sets cookies on other domains and never reads cookies set by ad platforms. Nothing follows your visitors around the web.
3Consent
The _tr cookie is only set after your consent banner grants analytics consent. Trace integrates with the common consent management platforms; see the documentation.
4Lifetime
The cookie expires after 13 months, or immediately if consent is withdrawn.
5Managing cookies
Visitors can clear the cookie through their browser settings at any time. Doing so starts a new journey on their next visit.
6Cookies on usetrace.io
For Trace Earn, our partner programme, this website can set a cookie called trace_ref. It remembers which Trace partner referred you, so they are credited if you sign up. It holds the code of the partner whose link you followed, and when you followed it. It lasts 180 days. It is a marketing cookie: in the UK and EU it is set only after you allow marketing cookies in our cookie banner, and elsewhere only if you have not refused them. Refusing marketing cookies later removes it. If you allow analytics cookies in our cookie banner, Google Analytics sets _ga and _ga_PBXN4HV1BT to measure how this website is used. They last 2 years. Nothing is sent to Google before you allow it, and refusing analytics cookies stops it. If you allow marketing cookies, the Google Ads tag sets _gcl_au and the Meta pixel sets _fbp, each kept for 90 days, so we can measure our advertising and show our ads again to people who have visited. Nothing is sent to Google Ads or Meta before you allow it, and refusing marketing cookies stops it.
Write to privacy@usetrace.io. We reply within one working day.