Privacy and data collection

Browser storage

The JavaScript SDK does not set cookies. It stores a persistent anonymous identifier in localStorage and a visit-scoped session identifier in sessionStorage when browser storage is available. Laws concerning cookies may also cover these similar storage technologies.

Information that can be collected

• Anonymous, session, project, and optional user identifiers
• Configured page views, custom events, properties, user traits, and group traits
• URLs, paths, query strings, referrers, and page titles
• User agent, browser, operating system, locale, viewport, timezone, and connection type
• Request IP address and approximate geography added by the API
• Exception messages and stacks, plus optional API request paths, statuses, and durations

These fields can contain personal or sensitive data. Do not send secrets, passwords, access tokens, full payment-card data, or information that is unnecessary for your stated analytics purpose.

Operator responsibilities

The organization deploying TraceIQ controls what is collected and is responsible for data minimization, notices, consent or another legal basis, retention, access and deletion requests, webhook recipients, security, and other requirements that apply to its users and jurisdictions.

TraceIQ does not make an implementation automatically GDPR, CCPA, PECR, or otherwise compliant. Automatic retention enforcement, a complete data-subject request workflow, IP anonymization, and consent management are not currently built in.