Privacy Policy
Last updated: September 2026
This Privacy Policy describes how dbtrail (“dbtrail”, “we”, “us”, or “our”) collects, uses, and shares information when you visit dbtrail.com (the “Site”) or run DBTrail, our open-source software (the “Software”).
Information We Collect
Information you provide
When you write to us by email, we receive your email address and whatever you include in the message. The Site has no accounts and no sign-up.
Information collected automatically on the Site
When you visit the Site, we automatically collect device and usage information including your IP address, browser type, operating system, referring URLs, pages viewed, and interactions with the Site. We collect this information using log files and Google Analytics, which sets cookies.
Information the Software sends
You run the Software on infrastructure you control. Your database credentials, schemas, row data, query text, and backups stay there and in the storage you configure. dbtrail does not receive them.
Official release builds of the Software send metadata-only usage statistics: which command ran, whether it worked, a coarse error class, the version, and the platform. Nothing in them identifies an installation, a machine, or a person. This is on by default in official builds and one step turns it off. The telemetry page lists every field that is sent, everything that is never sent, and the ways to turn it off.
The Software is open source and auditable. You can verify exactly what is transmitted.
How We Use Your Information
We use this information to:
- Maintain and improve the Site and the Software
- Respond to your requests, comments, and questions
- Understand which parts of the Site and the Software are used
- Detect, investigate, and prevent abuse of the Site
We do not train machine learning models on your data. We do not sell your data.
How We Share Your Information
We share your information only in the following circumstances:
Service providers: We use third-party vendors for hosting, email delivery, and analytics. These providers access your information only to perform services on our behalf.
Legal requirements: We may disclose your information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of dbtrail, our users, or others.
Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
We do not share, sell, or rent your personal information to third parties for their marketing purposes.
Data Retention
Usage statistics from the Software: Source IP addresses are dropped or truncated before anything is stored, and raw events are kept at most 90 days.
Site logs: Server logs and analytics data may be retained for up to 12 months for security and operational purposes.
Email: We keep messages you send us for as long as needed to answer them and to keep a record of the conversation.
Data Security
We implement appropriate technical and organizational measures to protect the information we hold, including encryption in transit (TLS) and access controls.
However, no method of transmission or storage is completely secure. We cannot guarantee absolute security of your information.
Cookies
The Site uses cookies for analytics, and your browser's local storage to remember display preferences such as the color theme. You can configure your browser to refuse cookies; the Site works without them.
Your Rights
Depending on your location, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you
- Correction: Request that we correct inaccurate or incomplete information
- Deletion: Request that we delete your personal information
- Portability: Request a machine-readable copy of your information
- Objection: Object to our processing of your personal information
- Restriction: Request that we restrict processing of your information
To exercise any of these rights, contact us at privacy@dbtrail.com. We will respond within 30 days.
For European Union residents
If you are located in the EU/EEA, we process your personal information on the following legal bases: legitimate interests (improving the Site and the Software, security, abuse prevention) and consent (where applicable). Your information may be transferred to the United States.
For California residents
Under the California Consumer Privacy Act (CCPA), California residents have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at privacy@dbtrail.com.
Do Not Track
The Software honors the DO_NOT_TRACK=1 environment variable: with it set, it sends no usage statistics. The Site does not respond to browser Do Not Track signals at this time.
Children
The Site and the Software are not intended for individuals under the age of 16. We do not knowingly collect personal information from children.
Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated policy on the Site. Your continued use of the Site after changes are posted constitutes acceptance.
Contact
For questions about this Privacy Policy or to exercise your privacy rights, contact us at:
Email: privacy@dbtrail.com