Cookie Policy
Last Updated: September 14, 2026
1. What Are Cookies
Cookies are small text files that are placed on your device when you visit our website traceoverlay.com. They are widely used to make websites work more efficiently and to provide information to website owners.
2. How We Use Cookies
We use cookies for the following purposes:
2.1 Essential Cookies (Required)
These cookies are necessary for the website to function and cannot be switched off.
- Authentication: Remember your login status
- Security: Protect against fraud and ensure security
- Preferences: Remember your app settings
Duration: Session-based or up to 1 year
| Cookie Name | Purpose | Duration |
|---|---|---|
auth_session |
Maintains your login session | Session |
csrf_token |
Security token to prevent cross-site attacks | Session |
2.2 Analytics and Local Storage
Our self-hosted Umami service measures website and native-app usage without analytics cookies. Website events use Umami session measurements and do not include account or customer identifiers. Limited browser session storage supports journey attribution and event deduplication.
The native mobile app stores a random, product-specific installation identifier in app-local storage to count use across app opens. This identifier is pseudonymous, persists across launches, and resets when app data is cleared or the app is uninstalled. It is not derived from an account, advertising ID, hardware/device identifier, store identity, image, or purchase. A limited local queue holds native events for retry when connectivity returns.
Analytics includes product interactions and outcomes, platform, app version, build, release channel, source surface, schema version, and test classification. Umami also processes request metadata such as IP address, user agent, timestamps, and approximate location. Analytics excludes image contents and names, camera frames, typed input, email addresses, payment details, raw error messages, and URLs containing query strings or secrets. See our Privacy Policy for the collection, purposes, and retention periods.
2.3 Functionality Cookies
These cookies enable enhanced functionality and personalization.
- Theme Preference: Remember your light/dark mode choice
- App Settings: Store your opacity, filter, and grid preferences
Duration: Up to 1 year
| Cookie Name | Purpose | Duration |
|---|---|---|
theme |
Stores your theme preference | 1 year |
app_settings |
Stores your app preferences | 1 year |
2.4 Marketing Cookies
We do not use marketing or advertising cookies. TraceOverlay does not serve ads or track you for advertising purposes.
3. Third-Party Cookies
3.1 Payment Processing (Stripe)
When you make a payment, Stripe may set cookies for fraud prevention and payment processing.
- Provider: Stripe
- Purpose: Secure payment processing and fraud detection
- Privacy Policy: stripe.com/privacy
3.2 Authentication (Google OAuth)
If you sign in with Google, Google may set cookies for authentication.
- Provider: Google
- Purpose: Authentication
- Privacy Policy: policies.google.com/privacy
4. Managing Cookies
4.1 Browser Settings
You can manage or disable cookies through your browser settings:
- Chrome: Settings > Privacy and security > Cookies and other site data
- Firefox: Options > Privacy & Security > Cookies and Site Data
- Safari: Preferences > Privacy > Manage Website Data
- Edge: Settings > Cookies and site permissions > Manage cookies
4.2 What Happens If You Disable Cookies
If you disable cookies, some features may not function properly:
- Login Issues: Unable to stay logged in
- Settings: Your preferences may not be saved
Essential app functionality (camera, image overlay) will still work.
5. Local Storage
In addition to cookies, we use browser local storage to store:
- App State: Your current overlay settings (opacity, position, rotation)
- Saved Images: Reference images are stored locally via IndexedDB
- User Preferences: Theme and app configuration
- Website journey state: Limited session storage for attribution and event deduplication
- Native analytics installation ID: A random pseudonymous identifier used to count repeat app opens without an analytics cookie
- Native analytics queue: A limited set of events awaiting best-effort delivery
Important: Your images are stored only on your device and are never uploaded to our servers.
6. Updates to This Cookie Policy
We may update this Cookie Policy from time to time. The updated version will be indicated by a revised "Last Updated" date.
7. GDPR and Cookie Consent
7.1 Your Rights (GDPR)
If you are located in the European Economic Area (EEA), you have the right to:
- Withdraw Consent: Remove your consent for non-essential cookies at any time
- Access: Request information about cookies we use
- Object: Object to certain types of cookies
7.2 Analytics Storage
Umami does not use analytics cookies, but the native installation identifier and local analytics storage described above still involve data processing. For questions about this processing or to exercise your privacy rights, contact [email protected]. We do not use marketing cookies.
8. CCPA and Cookie Information
8.1 California Residents
We do not sell your personal information. We do not use cookies for targeted advertising or to share your data with third parties for their marketing purposes.
You can opt-out of any data sharing by visiting: Do Not Sell My Info
9. Contact Us
If you have questions about this Cookie Policy, please contact us:
- Email: [email protected]
- Website: traceoverlay.com
Cookie Policy Version: 1.1 Effective Date: September 14, 2026