Privacy Policy

When you use TRACE, we process: • Account and authentication data: email address, username, display name, profile photo, selected “From” country and, when you choose Apple or Google sign-in, identifiers and account data supplied by that provider according to your provider choices • Content and activity: trips, dates, photos, captions, events you create, attendance choices, follows and requests, messages, comments, likes, mentions, reports, saved trips and saved places • Selected Now data: the city and country you manually choose, plus the name, category and provider reference of any optional place you add; this feature does not collect precise GPS coordinates or background location • Notification data: preferences and the authenticated account/device registration needed to deliver push notifications • Website waitlist data: normalized email, locale, source, consent time and status. The server derives an opaque HMAC fingerprint from request network data for abuse prevention and does not store the raw IP address in the rate-limit table • Diagnostics, only when Sentry is configured: error and exception details, code stack, app version, platform, release and environment. Dart-origin events are sanitized; native SDK events may include native diagnostic context • Optional website marketing measurement: the consent choice is stored in your browser. TikTok Pixel loads only after consent and may process page visits, waitlist conversion events, cookie identifiers and browser/device/network metadata; TRACE does not send your waitlist email to TikTok PostHog product analytics remains disabled in the current operational configuration.

“From” is the profile country you select as your origin. “Now in” is a separate, optional city and optional place that you select manually and can change or clear. TRACE may use the typed query and selected city context with Google Places or Mapbox to return place suggestions, but does not infer Now from continuous device location and does not track it in the background. Your selected Now city and place follow the same Everyone, Followers only, or Only me audience as your trips. Eligible users may see them in profiles, Search or People here now.

We use data to create and secure accounts; provide profiles, trips, maps, city pages, Happening, messages and social features; enforce your audience and blocking choices; deliver notifications you enable; operate the website waitlist; prevent abuse, spam and policy violations; diagnose failures; comply with legal obligations; and, only with website marketing consent, measure visits and waitlist conversions.

Core account, content, social, event, legal-receipt and waitlist records are stored on Supabase; uploaded media uses its storage service. Other providers process their own operational records. TRACE uses row-level access controls for user-facing data, server-owned writes for waitlist admission and legal receipts, HTTPS in transit, and does not store plaintext passwords in application data. No internet service is risk-free, so access is limited according to function and reviewed as the product changes.

Providers used for specific functions include: • Supabase — database, authentication, Edge Functions and file storage • Apple and Google — optional sign-in; Google also provides Places search and details • GeoNames — canonical city data and search aliases (CC BY 4.0 attribution) • Mapbox — maps and fallback place search • OneSignal — push notifications after permission and authenticated device registration • Sentry — crash diagnostics when configured • Ticketmaster, OpenDataHub and the Italian Ministry of Culture data services — external event listings where coverage is available • Vercel — public website and waitlist API hosting • Resend and the operator’s email provider — operational delivery of new waitlist signup notices • TikTok — optional website Pixel measurement only after consent External providers publish their own privacy information. PostHog code remains operationally disabled until its processing controls are verified. TRACE does not provide waitlist emails to TikTok or sell personal data to advertisers or data brokers.

You can set the audience for trips to Everyone, Followers only, or Only me. The same audience controls your selected Now city and optional place. Public profiles, trips, events and web previews can be seen and reshared according to their audience, but shared links do not override audience, blocking, moderation, deactivation or deletion controls. Your complete saved-places list is visible only to you. Followers may see that you saved a specific place when they browse it; blocked accounts are excluded. Event attendance may be visible to eligible users on the event.

TRACE does not sell, rent or trade personal data. Optional TikTok website measurement is disabled until you choose Allow marketing and can be revoked through Cookie settings in the website footer. Refusing or withdrawing marketing consent does not block the app, website or waitlist.

Depending on applicable law, you may request access, correction, deletion, restriction, objection or portability, and withdraw consent at any time without affecting earlier lawful processing. You can change trip/Now audiences, notification settings and website marketing consent directly; account deletion and data export are available in the app. The export is a ZIP of JSON records. Uploaded media files are not bundled, although published media references are included. To exercise a right or ask about provider records, contact support@shareontrace.com.

For privacy questions, rights requests, waitlist removal or questions about provider records, contact: support@shareontrace.com We may need to verify your identity before acting on a request.

We rely on the legal basis appropriate to each purpose: • Contract — to create and administer your account and provide the core service you request • Legitimate interests — to secure TRACE, prevent abuse, moderate content, maintain the service and understand operational failures, balanced against your rights • Consent — for optional website marketing measurement and device-level permissions such as push notifications where consent is required • Legal obligation — when records or disclosures are required by law Posting public content is your chosen use of the service, not blanket consent to unrelated processing. You may withdraw consent through the relevant control or by contacting us.

Account and legal-acceptance records are kept while the account is active and follow the account-deletion process, subject to limited legal or security obligations. Deleted content may persist briefly in technical backups or caches. Waitlist data is kept until you unsubscribe, request removal, join TRACE, or it is no longer needed for early access. The opaque fingerprint is used in 15-minute rate-limit windows and retained only as needed for abuse prevention and operational cleanup. Delivery logs, Sentry diagnostics and consent-based TikTok data follow the necessary operational period and applicable provider settings. PostHog remains disabled until region, retention and deletion controls are verified. Contact support@shareontrace.com for current details or a deletion request.

TRACE is operated and controlled by: Matteo Fietta support@shareontrace.com The controller determines the purposes and means of the processing described in this policy.

Some providers may process data outside your country or the European Economic Area. Where applicable, TRACE relies on a transfer mechanism permitted by data protection law and the provider’s contractual safeguards. Contact support@shareontrace.com for information relevant to your data. You may lodge a complaint with the competent supervisory authority where you live, work or believe an infringement occurred. In Italy this is the Garante per la protezione dei dati personali. Rights requests are handled without undue delay and normally within one month, subject to lawful extensions.