Privacy Policy

Who we are

Trace Exit is operated by Server Armour (Pty) Ltd, a South African company, trading as Trace Exit ("we", "us"). Contact: [email protected].

What we process

We process account data and IP addresses submitted to our API and free checker, including:

• Account email and organisation details
• Billing and subscription metadata (via Stripe)
• IP addresses and optional `requestTag` values you submit for lookup
• Usage metering needed to enforce plans

We do not process: SteamIds, payment card PANs (cards are handled by Stripe), or device fingerprints outside our product lane.

Purposes and legal bases

• Provide lookups and the console — contract
• Meter usage and bill subscriptions — contract; legal obligation where tax/records apply
• Secure the service (abuse, fraud against our systems) — legitimate interests
• Improve aggregated network risk (no SteamIds) — legitimate interests

Sharing

We use subprocessors listed in our Subprocessors page, including Stripe for payments. International transfers use appropriate safeguards (for example SCCs / UK IDTA) where required.

Retention

• Raw lookup-related logs: typically 30–90 days
• Current IP enrichment records: operational retention with refresh
• Aggregated network statistics: longer operational retention
• Billing and account records: as required by law

Your rights

Depending on applicable law (including POPIA and, where relevant, GDPR/UK GDPR/CCPA-style regimes), you may have rights of access, correction, deletion, portability (usage export), and to lodge a complaint with a supervisory authority. Email [email protected].

Cookies

The marketing site uses essential cookies. Non-essential cookies only with consent where required.