Retrace · Dragon Fractal

Privacy Policy

Last updated: 20 September 2026

Retrace is a file browser for SFTP, S3 and FTP servers, published by Dragon Fractal. This policy explains what it does with your information.

Retrace has no backend. There is no Retrace account, no Retrace server, and nothing to sign up for. The app sends no information about you or your use of it anywhere, because there is nowhere for it to send it.

This policy covers the Retrace mobile application only. Other Dragon Fractal products, including Cloud Cost Analyzer, have their own policies.

Information we collect

None. Retrace contains no analytics, no crash reporting, no advertising, and no tracking of any kind. It has no third-party software development kits that collect data. We do not know who uses Retrace, how often, or for what.

What Retrace connects to

Retrace connects only to the servers you tell it to: the SFTP, FTP and S3 addresses you enter. If you choose to sign in with AWS IAM Identity Center, it also contacts the Identity Center endpoint for the start URL and region you provide. It makes no other network connections.

Those servers are yours or your organisation's. What they record, and what their operators do with what you send them, is governed by them and not by this policy.

What stays on your device

The following are stored on your device and are never transmitted to us:

Uninstalling Retrace removes all of it.

Permissions

How we use your information

We receive no information from Retrace, so there is none to use, sell, share or disclose. We do not sell or share personal information, and never have.

Data retention

We retain nothing, because we receive nothing. Data on your device is kept until you delete it or uninstall the application.

Security

Connections use the protocol's own encryption: SFTP and FTPS are encrypted in transit. Plain FTP is not, and Retrace will not send a password over an unencrypted connection without warning you first and asking. Host keys and TLS certificates are pinned on first use and a connection is refused if they later change.

Third-party services

None. Retrace embeds no third-party analytics, advertising or crash-reporting services. It is distributed through Google Play, whose own handling of your data is governed by Google's privacy policy.

Your rights

Rights of access, correction, deletion, portability and objection all attach to personal data held by us about you. We hold none, so there is nothing for us to disclose, correct, delete or export. You can remove everything Retrace has stored by uninstalling it.

You are welcome to contact us to confirm this, and we will confirm it.

GDPR — European Economic Area and United Kingdom

We are not a controller or a processor of your personal data in connection with Retrace, because we do not receive any. No international transfer of your personal data takes place, since none is collected. Where you connect Retrace to your own servers, you remain the controller of the data on them.

CCPA and CPRA — California

We do not collect, sell, or share the personal information of California residents through Retrace, and we do not use or disclose sensitive personal information. In the preceding twelve months we have collected no categories of personal information through the application.

Children

Retrace is a tool for managing servers and is not directed at children. It collects nothing from anyone, of any age.

Cookies

Retrace is a mobile application and sets no cookies. This web page sets none either; the only external request it makes is for its typefaces from Google Fonts.

Changes to this policy

If this policy changes, the date at the top changes with it. Material changes will be noted in the application's release notes.

Contact

Questions about this policy, or about privacy in Retrace: retrace@dragonfractal.com