Skip to content
ParaTrace

Data protection

Privacy policy

How ParaTrace handles your data, and the rights you have under the GDPR. Updated 1 October 2026.

Who is responsible

Empirisch Tech GmbH, Rennweg 88, 1030 Vienna, Austria, runs paratrace.net and the ParaTrace API and is responsible for the data processed here. For anything about your data, use the contact form, write to us at that address or call +43 1 2396082. The Impressum has our full company details.

In short

  • We use your data to run ParaTrace, and we don't sell it.
  • Texts you check on the website stay in your history until you delete them. Texts sent to the developer API are scored and not stored.
  • Google Analytics runs only if you accept it, and you can withdraw that any time.
  • Fonts and every other part of the site come from our own server.

Visiting the website

When you open a page, your browser sends us its IP address, the page it asks for, the time, the page it came from and its name and version. Our web server needs these to deliver the page, and records them in a log to find faults and fend off attacks.

Legal basis
Our legitimate interest in running a working and secure website (Art. 6(1)(f) GDPR).
Kept for
14 days, then the log is deleted.

Requesting access and your account

To request access you give us your email address, your role and what you want to check. We review each request by hand. If we approve it, we email you a password, and your account then holds your email address, role, password, credit balance and whether the account is active. Signing in sends your email address and password with each request.

If you ask for more credits, we receive your message and email address by email so that we can answer.

Purpose
Deciding on your request, running your account and counting your credits.
Legal basis
Providing the service you asked for (Art. 6(1)(b) GDPR).
Kept for
As long as your account exists. Ask us and we delete it.

Contacting us

When you write to us with the contact form, we receive your name, email address, subject and message, and use them to answer you.

Legal basis
Answering questions about using ParaTrace (Art. 6(1)(b) GDPR), and otherwise our legitimate interest in answering the people who write to us (Art. 6(1)(f) GDPR).
Kept for
As long as we need it to deal with your message.

Checking texts

When you check a text on the website, we receive the text or files, the operating point you chose and the time. The detector scores them, and we store the texts with their verdicts and the credits they cost in your history.

Please don't submit texts that contain personal data, such as names, contact details or anything about someone's health or private life. If you check texts written by others, such as essays, make sure you are allowed to.

Purpose
Scoring your texts, showing the results and keeping your history.
Legal basis
Providing the service you asked for (Art. 6(1)(b) GDPR).
Kept for
Until you delete the check in your history, which removes its texts and verdicts from our server.

The developer API

To request an API key you give us your email address, your role and what you want to use the API for, and we email you the key with 1,000 free credits. We keep the key and how many credits it has used. Texts you send to the API are scored and not stored, and neither are their results.

Legal basis
Providing the service you asked for (Art. 6(1)(b) GDPR).
Kept for
As long as the key exists. Ask us and we delete it.

Bot check

The forms for requesting access, requesting an API key and contacting us use Turnstile from Cloudflare, Inc. to tell people from bots. To do that, Cloudflare receives your IP address and technical details of your browser.

Legal basis
Our legitimate interest in keeping automated abuse out (Art. 6(1)(f) GDPR).

Analytics, with your consent

If you accept analytics in the cookie question, we use Google Analytics, a service of Google Ireland Limited, to count visits and see which pages are read. It sets the cookies _ga and _ga_TVJ7JYWW10 and sends Google the pages you open, roughly where you are, and details of your browser and device. Google Analytics doesn't store your full IP address, and its advertising features are switched off. Without your consent, nothing from Google loads.

You can withdraw consent any time under , which also deletes these cookies.

Legal basis
Your consent (Art. 6(1)(a) GDPR and §165(3) of the Austrian TKG 2021).
Kept for
Google keeps the analytics data for at most 14 months.

What we store in your browser

These are all the items ParaTrace keeps in your browser. Only the ones marked as needing consent wait for your answer. The others are needed for the features you use (§165(3) of the Austrian TKG 2021), and none of them is sent to anyone else.

Items stored in your browser
NameWhat it holdsKept until
paratrace.sessionSession storageYour email address and password, so a reload keeps you signed in. They are sent with each request you make.You sign out or close the tab
paratrace.submissionsSession storageThe texts of your last 20 checks in this tab, to show them next to their results.You sign out or close the tab
react-router-scroll-positionsSession storageWhere you were on each page, to take you back there.You close the tab
paratrace.consentLocal storageYour answer to the cookie question, so we don't ask again.You change it or clear your browser data
_gaCookie · needs consentGoogle Analytics tells visits apart with it. Set only if you accept analytics.2 years, or until you withdraw consent
_ga_TVJ7JYWW10Cookie · needs consentGoogle Analytics tells visits apart with it. Set only if you accept analytics.2 years, or until you withdraw consent

Who receives data

We don't sell your data or share it for advertising. These companies process data for us.

  • Cloudflare, Inc. runs the bot check on our forms.
  • Google Ireland Limited runs Google Analytics, if you consent.
  • Our email provider delivers the emails we send you, such as your password or API key.

Some of these companies may process data in the USA. They are certified under the EU-US Data Privacy Framework, for which the European Commission has decided that the protection is adequate (Art. 45 GDPR).

Your rights

You have the right to

  • know what data we hold about you and get a copy (Art. 15 GDPR)
  • have wrong data corrected (Art. 16)
  • have your data deleted (Art. 17)
  • have its processing restricted (Art. 18)
  • get the data you gave us in a machine-readable form (Art. 20)
  • object to processing based on our legitimate interest (Art. 21)
  • withdraw a consent any time, without affecting what happened before (Art. 7(3))

To use them, use the contact form, write to us at the address above or call us. You can also complain to the Austrian data protection authority, the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb.gv.at.

Automated decisions

The detector scores texts automatically, but its verdicts are statistical estimates about a text, not decisions about you. We make no decisions about people based on them, and nobody should use a verdict as the sole basis for a decision about a person.

Changes to this policy

When ParaTrace changes what it does with data, we update this page and its date. If a change needs your consent, we ask for it again.