trust · security

Security at Tracebase

You're trusting us with the keys to your online identity. Here's exactly how we protect them.

Passwords storedZerofor any third-party service
EncryptionIn transit & at restTLS on the wire, encrypted on disk
Account deletionImmediateirreversible, from Settings

01

We never touch your passwords

Tracebase only needs your email addresses and usernames to scan. We never ask for, receive, or store passwords for any third-party service, and we never log into your accounts — every check runs against publicly available information.

02

Encryption everywhere

  • All traffic is encrypted in transit with TLS.
  • All stored data is encrypted at rest.

03

Hardened authentication & payments

  • Sign-in is handled by Clerk, a dedicated authentication provider, with support for multi-factor authentication.
  • Payments are processed by Stripe (PCI-DSS Level 1). Your card details never touch our servers.

04

You stay in control

  • Every email you add is verified with a one-time code before we scan it.
  • Domains are verified via DNS records to prove ownership.
  • You can delete any scan input, or your entire account and all its data, at any time from Settings — deletion is immediate.

responsible_disclosure

Found a security issue?

We want to know. Email us and we'll respond as fast as we can. Please don't test against other users' data.

[email protected]

For details on what we collect and why, read our Privacy Policy.