Your data, handled with care.
Tracelight is a tool for running workshops — not a data business. This page explains exactly what we access, what we store, and what we never do.
What Tracelight does
Tracelight lets workshop hosts connect their Google Drive or Dropbox account, choose a file, and share a temporary link with participants. Participants open that link on a device with a camera and see the worksheet overlaid live — no printing required.
That is the entire purpose of the app. Everything we access exists to make that flow work, nothing more.
What we access
When you connect Google Drive or Dropbox, we store an encrypted OAuth token in our database. This token lets us fetch the list of files in your account and retrieve the content of a file when a participant opens a session link.
We access your account email address to identify your integration. We read file names, types, and modification dates to populate your dashboard. We temporarily stream file content (PDF or image) to a participant's browser when a session is active.
File content is never written to our servers or database. It is streamed directly to the participant and discarded.
What we never do
We do not sell, share, rent, or otherwise transfer your data to any third party — ever.
We do not use your files, metadata, or account information to train models, run analytics, serve advertising, or for any purpose beyond the core features described above.
We do not use third-party analytics scripts or tracking pixels. No data about your usage is sent to external services.
Data storage & security
Your OAuth tokens are encrypted at rest before being written to our database. Session links expire after a fixed window and are deleted from our records. No file content is persisted beyond an active stream.
You can disconnect Google Drive or Dropbox at any time from your dashboard. Doing so permanently deletes your stored token.
Google API limited use disclosure
Tracelight's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically: data obtained via Google APIs is used only to provide and improve the workshop overlay feature. It is not used to develop, improve, or train generalised AI or ML models. It is not transferred to third parties except as necessary to provide the service (i.e., streaming a file to the participant's browser during an active session you created).
Contact
If you have any questions about this privacy policy or how your data is handled, please reach out at ddavidbailey@outlook.com.