Privacy

How ThermalTrace handles your data (web and Android), retention, and account deletion. Last updated September 2, 2026.

What we store

  • Account email and auth metadata (Supabase Auth)
  • Device and sensor configuration, temperature/humidity readings
  • Alert settings and delivery audit logs
  • Optional billing data via Stripe (we do not store card numbers)
  • On the Android app: session tokens on-device; optional Firebase Cloud Messaging device tokens when you enable push (used only to deliver your alerts)

Android app

The ThermalTrace Android app (`dev.thermaltrace.android`) is a client for this website. It does not read temperature from the phone. It signs in with your ThermalTrace account and loads the same household readings and settings over HTTPS. Push notifications are optional and can be turned off in the app (Account) and under Alert settings on the web.

Retention

Raw sensor readings roll up and expire on a schedule (90 days default on Free; longer on paid plans). You can set a custom retention window under Dashboard → Settings. Archived snapshots may be stored in cold storage for Pro households.

Export & deletion

Export JSON anytime from /api/user/export while signed in. Delete your account under Dashboard → Settings, this removes alert settings, push device tokens, and sole-owned households. Account deletion on the website also applies to Android app access.

Push notifications

Browser Web Push uses VAPID keys we control. The Android app may register an FCM device token when you enable push. Tokens are stored to deliver your household’s alerts and are removed when you disable push, sign out of push on that device, or delete your account. We do not sell push tokens.

Analytics

On public marketing pages (production), we load Google Analytics (GA4) and Ahrefs Web Analytics to understand traffic and referrals. Those scripts are not loaded on /dashboard or /api routes (except a few conversion thank-you paths). Product funnel events sent to GA are anonymized and never include live temperature readings. A short on-page notice appears the first time you visit a marketing page; dismissing it only hides the notice in this browser.

Contact

Privacy questions: Contact.