Data protection
Privacy policy
How ParaTrace handles your data, and the rights you have under the GDPR. Updated 1 October 2026.
Who is responsible
Empirisch Tech GmbH, Rennweg 88, 1030 Vienna, Austria, runs paratrace.net and the ParaTrace API and is responsible for the data processed here. For anything about your data, use the contact form, write to us at that address or call +43 1 2396082. The Impressum has our full company details.
In short
- We use your data to run ParaTrace, and we don't sell it.
- Texts you check on the website stay in your history until you delete them. Texts sent to the developer API are scored and not stored.
- Google Analytics runs only if you accept it, and you can withdraw that any time.
- Fonts and every other part of the site come from our own server.
Visiting the website
When you open a page, your browser sends us its IP address, the page it asks for, the time, the page it came from and its name and version. Our web server needs these to deliver the page, and records them in a log to find faults and fend off attacks.
- Legal basis
- Our legitimate interest in running a working and secure website (Art. 6(1)(f) GDPR).
- Kept for
- 14 days, then the log is deleted.
Requesting access and your account
To request access you give us your email address, your role and what you want to check. We review each request by hand. If we approve it, we email you a password, and your account then holds your email address, role, password, credit balance and whether the account is active. Signing in sends your email address and password with each request.
If you ask for more credits, we receive your message and email address by email so that we can answer.
- Purpose
- Deciding on your request, running your account and counting your credits.
- Legal basis
- Providing the service you asked for (Art. 6(1)(b) GDPR).
- Kept for
- As long as your account exists. Ask us and we delete it.
Contacting us
When you write to us with the contact form, we receive your name, email address, subject and message, and use them to answer you.
- Legal basis
- Answering questions about using ParaTrace (Art. 6(1)(b) GDPR), and otherwise our legitimate interest in answering the people who write to us (Art. 6(1)(f) GDPR).
- Kept for
- As long as we need it to deal with your message.
Checking texts
When you check a text on the website, we receive the text or files, the operating point you chose and the time. The detector scores them, and we store the texts with their verdicts and the credits they cost in your history.
Please don't submit texts that contain personal data, such as names, contact details or anything about someone's health or private life. If you check texts written by others, such as essays, make sure you are allowed to.
- Purpose
- Scoring your texts, showing the results and keeping your history.
- Legal basis
- Providing the service you asked for (Art. 6(1)(b) GDPR).
- Kept for
- Until you delete the check in your history, which removes its texts and verdicts from our server.
The developer API
To request an API key you give us your email address, your role and what you want to use the API for, and we email you the key with 1,000 free credits. We keep the key and how many credits it has used. Texts you send to the API are scored and not stored, and neither are their results.
- Legal basis
- Providing the service you asked for (Art. 6(1)(b) GDPR).
- Kept for
- As long as the key exists. Ask us and we delete it.
Bot check
The forms for requesting access, requesting an API key and contacting us use Turnstile from Cloudflare, Inc. to tell people from bots. To do that, Cloudflare receives your IP address and technical details of your browser.
- Legal basis
- Our legitimate interest in keeping automated abuse out (Art. 6(1)(f) GDPR).
Analytics, with your consent
If you accept analytics in the cookie question, we use Google Analytics, a service of Google Ireland Limited, to count visits and see which pages are read. It sets the cookies _ga and _ga_TVJ7JYWW10 and sends Google the pages you open, roughly where you are, and details of your browser and device. Google Analytics doesn't store your full IP address, and its advertising features are switched off. Without your consent, nothing from Google loads.
You can withdraw consent any time under , which also deletes these cookies.
- Legal basis
- Your consent (Art. 6(1)(a) GDPR and §165(3) of the Austrian TKG 2021).
- Kept for
- Google keeps the analytics data for at most 14 months.
What we store in your browser
These are all the items ParaTrace keeps in your browser. Only the ones marked as needing consent wait for your answer. The others are needed for the features you use (§165(3) of the Austrian TKG 2021), and none of them is sent to anyone else.
| Name | What it holds | Kept until |
|---|---|---|
paratrace.sessionSession storage | Your email address and password, so a reload keeps you signed in. They are sent with each request you make. | You sign out or close the tab |
paratrace.submissionsSession storage | The texts of your last 20 checks in this tab, to show them next to their results. | You sign out or close the tab |
react-router-scroll-positionsSession storage | Where you were on each page, to take you back there. | You close the tab |
paratrace.consentLocal storage | Your answer to the cookie question, so we don't ask again. | You change it or clear your browser data |
_gaCookie · needs consent | Google Analytics tells visits apart with it. Set only if you accept analytics. | 2 years, or until you withdraw consent |
_ga_TVJ7JYWW10Cookie · needs consent | Google Analytics tells visits apart with it. Set only if you accept analytics. | 2 years, or until you withdraw consent |
Who receives data
We don't sell your data or share it for advertising. These companies process data for us.
- Cloudflare, Inc. runs the bot check on our forms.
- Google Ireland Limited runs Google Analytics, if you consent.
- Our email provider delivers the emails we send you, such as your password or API key.
Some of these companies may process data in the USA. They are certified under the EU-US Data Privacy Framework, for which the European Commission has decided that the protection is adequate (Art. 45 GDPR).
Your rights
You have the right to
- know what data we hold about you and get a copy (Art. 15 GDPR)
- have wrong data corrected (Art. 16)
- have your data deleted (Art. 17)
- have its processing restricted (Art. 18)
- get the data you gave us in a machine-readable form (Art. 20)
- object to processing based on our legitimate interest (Art. 21)
- withdraw a consent any time, without affecting what happened before (Art. 7(3))
To use them, use the contact form, write to us at the address above or call us. You can also complain to the Austrian data protection authority, the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb.gv.at.
Automated decisions
The detector scores texts automatically, but its verdicts are statistical estimates about a text, not decisions about you. We make no decisions about people based on them, and nobody should use a verdict as the sole basis for a decision about a person.
Changes to this policy
When ParaTrace changes what it does with data, we update this page and its date. If a change needs your consent, we ask for it again.