← Back to BrowserTrace Online

Privacy Policy

1. Introduction

BrowserTrace Online ("we," "our," or "us") is a demonstration platform that shows browser fingerprinting techniques for defensive security awareness. This Privacy Policy explains how we collect, use, and protect information when you visit our website.

2. Demonstration Purpose of This Service

This platform is designed to:

• Demonstrate passive data collection techniques
• Show users how browser fingerprinting works
• Raise awareness about online privacy
• Provide transparency about tracking methods

What We Do NOT Do

• Use your fingerprinting data for commercial purposes
• Track users across other websites
• Sell or share data with third parties
• Create advertising profiles from your fingerprinting data
• Use data for surveillance or monitoring

Revenue & Advertising

This platform may display limited advertising to help cover hosting and operational costs. However, your browser fingerprinting data is never used for advertising purposes or shared with advertisers.

3. Information We Collect

3.1 Data Collected With Your Consent

We only collect data after you explicitly consent to participate in our interactive demonstration. The data includes:

Network Information

• IP address (for geolocation demonstration)
• User-Agent string (browser and OS information)
• Language preferences
• Timezone information
• Connection characteristics

Browser Characteristics

• Screen resolution and color depth
• Window dimensions
• Hardware information (CPU cores, memory)
• Supported browser capabilities
• Installed plugins and fonts

Fingerprinting Data

• Canvas fingerprint hash
• WebGL renderer information
• Audio context fingerprint
• Device characteristics

3.2 How Data is Collected

All data collection is performed transparently using JavaScript running in your browser. The collected data is immediately displayed to you on the website before being transmitted to our servers.

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), our legal basis for processing your data is:

• Consent (Article 6(1)(a)): You explicitly consent to data collection for demonstration and security awareness purposes
• Legitimate Interest (Article 6(1)(f)): Demonstration and research purposes in cybersecurity awareness

5. How We Use Your Information

Your data is used exclusively for:

• Demonstrating browser fingerprinting techniques
• Interactive display on the website
• Aggregated analysis for research purposes
• Improving the demonstration effectiveness of the platform

6. Data Storage and Security

6.1 Storage Location

Data is stored securely in Amazon Web Services (AWS) infrastructure in the United States, specifically:

• Amazon S3 for raw data storage
• Encrypted in transit and at rest
• Access controlled through IAM policies

6.2 Security Measures

• HTTPS encryption for all data transmission
• AWS security best practices implementation
• Limited access controls and monitoring
• Regular security updates and patches

7. Your Rights Under GDPR

As a data subject, you have the following rights:

7.1 Right to Access

You can request a copy of all data we have collected about you.

7.2 Right to Rectification

You can request correction of any inaccurate data.

7.3 Right to Erasure ("Right to be Forgotten")

You can request deletion of your data at any time.

7.4 Right to Data Portability

You can request your data in a structured, machine-readable format.

7.5 Right to Object

You can object to processing of your data for legitimate interests.

7.6 Right to Withdraw Consent

You can withdraw consent at any time, which will stop further data collection.

8. Data Retention

We retain data for the minimum time necessary for demonstration and security awareness purposes:

• Active Data: Retained for up to 12 months for research analysis
• Aggregated Data: May be retained indefinitely in anonymized form
• Upon Request: Individual data deleted within 30 days of request

9. Data Sharing

We do not sell, trade, or transfer your data to third parties except:

• When required by law or legal process
• In anonymized, aggregated form for research purposes
• With explicit consent for specific demonstration or research collaborations

10. Children's Privacy

This service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that a child under 16 has provided us with personal information, we will delete such information immediately.

11. International Data Transfers

Data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers, including:

• Standard contractual clauses
• Adequacy decisions by the European Commission
• Certification schemes where applicable

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or applicable laws. We will notify you of any material changes by:

• Posting the updated policy on our website
• Updating the "Last Updated" date
• Requiring new consent for material changes

13. Contact Information

14. Supervisory Authority

If you are located in the European Union, you have the right to lodge a complaint with your local data protection authority if you believe our processing of your personal data violates applicable law.

15. Consent Withdrawal

You can withdraw your consent for data collection at any time by:

• Clearing your browser's local storage
• Contacting us directly
• Using the opt-out mechanisms on our website

Return to BrowserTrace Online