PRIVACY

Title, transcript, description, view count, the folder, the link. That is the whole record of a recording (metadata), kept in a Postgres database. The video file itself is never uploaded here: the Mac app writes it to your Dropbox and the player streams it from there.

On an Apple Silicon Mac the transcript is made on the Mac (Whisper, on-device model) and only the text reaches the server. Pick a cloud engine in the app, or run it on an Intel Mac, and the audio goes through Tracer's server to Google Gemini or Groq for transcription and is not kept afterwards. The optional AI title and description are made from the transcript text, never from the video.

Tracer asks for one app folder (Apps/NoCorny Tracer) and nothing else. It keeps your Dropbox account id, e-mail and name, and the access tokens, encrypted. Disconnect Dropbox in Settings and every public link stops working the same minute; the files stay yours.

A public link needs no account and sets no cookie. For each view Tracer keeps the time, the country and a one-way hash of the viewer's address and browser (a fingerprint, used only to count a viewer once), so the author can see that someone watched. No names, no third-party analytics on the player page.

Sign in is Google only; no password is stored. The account record is your e-mail, your name and avatar as Google reports them, one session cookie, and one hashed token for the approved Mac (the clear token lives only in that Mac's Keychain). Sessions expire after 30 days of silence.

Every AI call made for you (transcription, title, description) is logged with the model, token counts, latency and cost, plus a copy of your e-mail and the recording's title at that moment, so cost reports stay readable after a deletion. Visits to the admin pages are logged with the admin's id and path; regular users never appear there. A problem report sent from the Mac app carries a filtered slice of the app log, the app and macOS versions, the Mac model and your e-mail if you are signed in.

Delete a recording and its link stops working the same minute; the record is marked deleted and leaves the database together with the account. Delete the account in Settings and everything above goes with it, links included, except the AI usage log, which keeps the e-mail and title copies. Write to maksym@nocorny.agency to have those purged too, or to ask for a copy of your data. Operator: Maksym, trading as NoCorny Agency, Ukraine. Hosting: Vercel. Database: Supabase, on AWS in the United States (us-east-1).