Privacy Policy

Last updated: April 2026 — pursuant to GDPR (EU) 2016/679

1. Data Controller

The data controller within the meaning of the GDPR is:

Arik Wittlich
Bassener Dorfstraße 19
28876 Oyten
Germany

Email: founders@httrace.com

2. Data We Collect

2.1 Waitlist Sign-Up

When you join the waitlist, we store:

Data	Purpose	Legal Basis	Retention
Email address	Notify you about beta access and product updates	Art. 6(1)(a) GDPR (consent)	Until unsubscribe or on request
Sign-up timestamp	Determine waitlist order	Art. 6(1)(f) GDPR (legitimate interest)	Same as email address

2.2 Service Usage (Customers)

When you use Httrace as a product, we process the following data under the contract:

• HTTP requests and responses from your API (anonymized — PII is removed before transmission)
• API key and associated email address
• Usage statistics (number of requests processed per month)

Legal basis: Art. 6(1)(b) GDPR (performance of a contract)

2.3 Website Analytics (Plausible Analytics)

We use Plausible Analytics for privacy-friendly website analytics. Plausible sets no cookies, creates no user profiles, and collects no personal data. Only anonymized aggregate data (page views, countries, browsers) is processed.

Provider: Plausible Analytics, Grubenstraße 10, 10627 Berlin (EU servers).
More info: plausible.io/data-policy

3. Sharing with Third Parties

We do not share your data with third parties, except:

• Resend (email delivery) — for sending notifications. EU servers. Privacy policy: resend.com/legal/privacy-policy
• Fly.io (server hosting) — our servers run in Frankfurt (EU). Privacy policy: fly.io/legal/privacy-policy
• When required to do so by law.

4. Data Storage and Security

All data is stored on servers in Frankfurt, Germany (EU). All transmissions are encrypted via TLS 1.3. Data at rest is encrypted with AES-256.

HTTP payload data is scrubbed before transmission by automatic PII filtering (passwords, tokens, credit card numbers, email addresses, etc. are replaced with placeholders). Raw payloads are not stored permanently.

5. Your Rights (GDPR Art. 15–21)

You have the right to:

• Access — what data we have stored about you (Art. 15)
• Rectification — correction of incorrect data (Art. 16)
• Erasure — "right to be forgotten" (Art. 17)
• Restriction of processing (Art. 18)
• Objection to processing (Art. 21)
• Data portability (Art. 20)
• Withdrawal of consent previously given (Art. 7(3))

To exercise these rights, contact us at: founders@httrace.com

You also have the right to lodge a complaint with the competent supervisory authority. The authority responsible for our registered address is:
Der Landesbeauftragte für den Datenschutz Niedersachsen (LfD Niedersachsen), Prinzenstraße 5, 30159 Hannover, lfd.niedersachsen.de

6. Unsubscribe from Waitlist

To be removed from the waitlist and have your data deleted, email founders@httrace.com with the subject "Delete waitlist". We will remove your data within 7 business days.

7. Cookies

This website uses no tracking cookies. Plausible Analytics is cookieless. Technically necessary session data is held in memory only and not set persistently.

8. Changes to This Privacy Policy

We reserve the right to update this privacy policy as needed. The current version is always available on this page. Active users will be notified by email of material changes.