Privacy policy
Retrace finds where a video came from. To do that it has to look at the video you give it. This page says exactly what is kept, for how long, and who else sees it. The short version: your video is deleted after 60 minutes, an anonymous search after 30 days, and nothing is sold to anyone.
Who is responsible
The data controller is Sailing Paradise LLC. Write to lucastomic@solnow.io for anything on this page.
What we collect, and why
The video or link you search. We extract a few frames and send them to a visual search provider. The uploaded file is deleted 60 minutes after the scan — the window in which a Trace can still be bought for it. Purpose: providing the search you asked for (contract, GDPR art. 6.1.b).
The search record. The file name or link, the matches found, and small thumbnails of the analysed frames. A search made without an account is deleted after 30 days. A search in an account stays in its history until you delete it, and is then erased 30 days later.
Your email address, if you sign in or pay, to send sign-in links (15-minute validity) and receipts, and to hold your balance. Kept while the account exists.
Payments. Card details go to Stripe and never reach us. We keep the amount, date and Stripe reference of every top-up and every movement of your balance, for as long as tax and accounting law requires.
IP address, to apply the daily limit of free scans and to keep the service from being abused (legitimate interest, art. 6.1.f). Kept in server logs.
A shared cache of perceptual frame fingerprints and the links found for them, kept 30 days, so that a video someone already searched does not cost the next person anything. It holds no names, emails or accounts.
Who else processes it
Only providers needed to run the service, under data-processing terms: Amazon Web Services (servers and email, Paris region), Vercel (this website), Stripe (payments), Google Cloud Vision and SearchApi.io (the visual search itself — they receive the analysed frames, never your email), and Microsoft Clarity (anonymised usage analytics, only if you accept it). Some of them are based in the United States; transfers rely on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.
We do not sell data, show ads, or build profiles of who searches what.
Cookies
Strictly necessary, always on: rvs_session keeps you signed in for up to 30 days and rvs_csrf protects your account from forged requests.
Analytics, only with your consent: Microsoft Clarity sets its own cookies (_clck, _clskand others) to record anonymised heatmaps and sessions; text you type is masked. You can change your choice at any time from “Cookie settings” at the bottom of every page.
Your rights
You can ask for access, rectification, erasure, restriction, portability or objection by writing to lucastomic@solnow.io. You can delete any search from your history yourself. If you think we have not handled your data properly, you can complain to the data protection authority of your country (in Spain, the AEPD at aepd.es).
See also the terms of use.