RootTrax

Privacy Policy

RootTrax ("we," "us," or "our") operates the roottrax.com website and application. This page explains our privacy practices and how we handle your information.

1. Information We Collect

Account Information:

• Email address (required for account creation)
• Password (hashed and encrypted, never stored in plain text)
• Account creation date and login history

Activity Data:

• Words you search for etymology (lookups)
• Whether results came from cache or fresh AI generation
• Lookup response times and aggregate usage patterns
• Your consent preferences (tracking, analytics)

Analytics & Tracking (Google Analytics):

• Pages you visit and time spent
• Browser type, device type, and general location (country/region)
• How you arrived at RootTrax (referral source)
• No personally identifying information is sent to Google Analytics

Session Recording (FullStory — Optional):

• Only collected if you explicitly accept session recording on signup or login
• Records user interactions, mouse movement, and clicks for usability improvement
• Does not record password fields or sensitive data
• You can opt-out or change your preference in account settings

2. How We Use Your Information

• Account Management: Authenticate your account and maintain your session
• Service Improvement: Analyze which words are most searched, track API performance, and identify bugs
• User Experience: Understand how users interact with RootTrax to improve interface and features
• Safety: Detect and prevent abuse, fraud, or security issues

We do not sell, rent, or share your data with third parties for marketing purposes.

3. Data Retention

• Account Data: Kept as long as your account is active. Delete your account to remove this data.
• Lookup History: Retained for up to 90 days for performance analysis, then aggregated
• Google Analytics: Retained per Google's standard (typically 14 months)
• FullStory Session Recordings: Retained for 30 days unless you decline recording

4. Your Rights

Access & Download: You can request a copy of all data we hold about you.

Correction: You can update your email address and account information.

Deletion: You can delete your account at any time. We will remove your account data within 30 days. Aggregate usage data (anonymized lookups) may be retained indefinitely for service improvement.

Opt-Out of Analytics: Disable Google Analytics via Google's browser extension

Opt-Out of Session Recording: You can decline or withdraw consent for FullStory at any time from your account settings.

5. Children's Privacy

RootTrax is not intended for children under 13. We do not knowingly collect data from children under 13. If we become aware of such collection, we will delete the data promptly.

6. International Users

GDPR (European Users):

• You have the right to access, correct, or delete your personal data
• We process data based on your consent (for FullStory) and legitimate interest (account functionality, service improvement)
• You have the right to lodge a complaint with your data protection authority
• FullStory session recording requires explicit opt-in consent

CCPA (California Users):

• You have the right to know what personal information we collect
• You have the right to delete personal information we hold
• You have the right to opt-out of the "sale" of personal information (we do not sell data)
• You have the right to non-discrimination for exercising your privacy rights

7. Cookies & Local Storage

RootTrax uses browser cookies and local storage to maintain your session and remember your preferences (theme, consent choices). No cookies are used for tracking or advertising.

8. Third-Party Services

Google Analytics: We use Google Analytics to understand how users interact with RootTrax. Google's privacy policy

FullStory: We use FullStory (optional, requires consent) for session recording to improve usability. FullStory's privacy policy

9. Security

Your password is hashed using bcrypt, a secure algorithm. We do not store plain-text passwords. All communication with roottrax.com uses HTTPS encryption. However, no system is 100% secure. If you suspect a security breach, please contact us immediately.

10. Contact Us

If you have questions about this privacy policy, want to exercise your rights, or report a privacy concern:

Email: privacy@roottrax.com
Website: roottrax.com

We will respond to privacy requests within 30 days.