Privacy Policy

Who operates Trace8

Trace8 is operated by Codezela Technologies. Questions or privacy requests can be sent to [email protected].

Information we process

• Account data: name, email address, securely hashed password, organization membership, and preferences.
• Project and test data: project names, environments, run status, timing, branches, commit metadata, test names, file paths, errors, retry output, and flakiness statistics.
• Artifacts: screenshots, Playwright traces, videos, and attachments that you choose to upload through the CLI.
• Configuration: hashed project tokens and, when enabled, encrypted Slack webhook configuration.
• Operational data: standard request metadata used by our hosting providers and short-lived rate-limit records used to protect the service.

How we use information

We use this information to authenticate users, receive and display test runs, generate private artifact links, calculate reliability trends, send alerts you configure, enforce limits, prevent abuse, support users, and maintain the service. We do not sell personal information.

Service providers

Trace8 currently uses Vercel for application hosting, Neon for PostgreSQL, and Backblaze B2 for private artifact storage. Slack receives alert content only when an organization owner configures a Slack incoming webhook. These providers process data under their own terms and may operate in other countries.

Storage and retention

Artifacts are stored in a private bucket and are opened with short-lived, authorized links. The default artifact retention period is 14 days. Run metadata remains available until the relevant organization or account is deleted, unless a longer period is required to resolve abuse, legal, or operational issues. Provider logs follow the providers' configured retention.

Your controls

Account settings let you update your name and password, download a JSON copy of account and project metadata, and permanently delete your account and the organizations you created. Project owners can rotate or revoke ingest tokens and remove projects. Contact us for requests that cannot be completed in the app.

Cookies and local storage

Trace8 uses essential session cookies to keep you signed in and browser storage for interface preferences such as color theme. We do not currently use advertising cookies.

Security and children

We apply access controls, encryption in transit, private object storage, and secret hashing or encryption where appropriate. No online service can promise absolute security. Trace8 is a developer tool and is not directed to children.

Policy changes

We may update this policy as the product or providers change. Material updates will be reflected by the date shown above. Continued use after an update is subject to the revised policy and any rights provided by applicable law.