Privacy Policy
Effective date: July 10, 2026
Last updated: July 10, 2026
Roamer.one is an open-source digital identity and privacy project. This Privacy Policy explains how information is handled when you:
- visit roamer.one or its related pages;
- communicate with us through the website or by email; or
- install or use the Traceveil Chrome extension.
In this policy, “Roamer.one,” “Roamer,” “Traceveil,” “we,” “us,” and “our” refer to the operator of the Roamer.one project.
Our guiding principle is data minimization: we aim to collect as little personal information as reasonably possible and to keep Traceveil’s privacy-related processing on the user’s device.
1. Scope of this policy
This Privacy Policy applies to:
- the roamer.one website and any pages or subdomains that link to this policy;
- the Traceveil Chrome extension;
- support, feedback, security reports, and other communications sent to us.
This policy does not govern third-party websites, browsers, extension stores, hosting providers, repositories, or services that have their own privacy policies.
2. Information handled by the roamer.one website
2.1 Information you provide
We may receive information that you voluntarily provide, such as:
- your name;
- your email address;
- the contents of a message, support request, or security report;
- attachments or technical information you choose to send;
- correspondence relating to contributions, feedback, or project participation.
You are not required to create a Roamer.one account to browse the public website or use the current version of Traceveil.
2.2 Basic website and server information
When you visit roamer.one, the website infrastructure or hosting provider may automatically process limited technical information needed to deliver and secure the website, such as:
- Internet Protocol address;
- date and time of access;
- requested page or resource;
- browser and device type;
- operating system;
- referring page;
- basic error, security, and server-log information.
This information may be processed to operate the website, prevent abuse, diagnose technical problems, investigate security incidents, and maintain service reliability.
We do not use server logs to build advertising profiles or to track individuals across unrelated websites.
2.3 Cookies and local website storage
Roamer.one does not use third-party advertising cookies.
The website may use cookies or local browser storage that are strictly necessary for security, accessibility, interface preferences, session management, or other requested functionality.
If optional analytics, embedded third-party content, account functionality, or additional cookies are introduced, we will update this policy and provide any notices or consent controls required by applicable law.
2.4 Website analytics
The current website is intended to operate without invasive or cross-site analytics.
If limited privacy-preserving analytics are used, they will be restricted to information reasonably necessary to understand aggregate website performance and improve the site. We will not use analytics data for behavioral advertising or sell it to data brokers.
3. How Traceveil works
Traceveil is a browser privacy extension designed to reduce browser fingerprinting and limit common tracking signals.
Depending on the version and settings selected by the user, Traceveil may:
- normalize selected browser and device characteristics;
- apply controlled interference to fingerprinting surfaces;
- reduce the stability or uniqueness of certain fingerprint signals;
- modify selected browser-exposed values;
- apply lightweight tracker-filtering or request-handling rules;
- maintain per-site or global privacy settings;
- display information about its current protection state.
To provide these features, Traceveil must interact with webpages and browser functionality while you browse. This access is used to provide the extension’s disclosed privacy-protection purpose.
4. Information handled by Traceveil
4.1 Browsing-related information
Traceveil may temporarily access or process information associated with webpages you visit, including:
- the website origin or domain;
- page context required to apply protection rules;
- browser requests relevant to tracker filtering;
- browser-exposed fingerprinting surfaces;
- site-specific compatibility or protection settings.
This processing is performed to decide which protections should be applied and to make those protections function correctly.
Traceveil is not designed to create a centralized browsing-history database.
4.2 Extension settings and configuration
Traceveil may store information such as:
- whether protection is enabled;
- selected protection level or individual feature settings;
- site-specific exceptions;
- compatibility preferences;
- extension version and configuration state;
- locally generated values used to provide controlled fingerprinting protection.
These settings are stored using storage mechanisms provided by the Chrome browser.
Depending on the extension version, browser configuration, and Chrome synchronization settings, some preferences may be stored locally or synchronized by Chrome between browsers signed into the same Google account. Browser synchronization is operated by Google and is governed by Google’s own terms and privacy policies.
4.3 Local processing
Traceveil is designed so that browsing-related privacy processing occurs locally within the browser.
Traceveil does not send your browsing history, page contents, form entries, passwords, financial information, health information, authentication credentials, or communications to Roamer.one servers.
Traceveil does not use information obtained through its browser permissions to create advertising profiles.
4.4 Remote resources and updates
Chrome may contact Google infrastructure to install, verify, update, disable, or remove the extension as part of normal Chrome Web Store operation.
Traceveil may also retrieve publicly available extension resources, rules, security updates, or configuration information when this is necessary to maintain its protection features. Such requests may expose ordinary network information, such as an IP address and request time, to the infrastructure hosting the requested resource.
Traceveil does not intentionally include the user’s browsing history or the contents of webpages in those update requests.
4.5 Permissions
Traceveil requests browser permissions only when they are reasonably necessary for its privacy-protection functionality.
Depending on the release, these permissions may allow Traceveil to:
- run protection code on webpages;
- inspect or modify selected browser requests;
- apply filtering rules;
- store extension preferences;
- manage scheduled extension tasks;
- detect the current tab or website where protection is being applied.
A browser permission may technically provide access to more information than Traceveil actively collects or retains. Traceveil’s use of that permission remains limited to the extension’s disclosed privacy-protection purpose.
5. Information Traceveil does not collect for Roamer.one
Unless a future version clearly discloses otherwise before collection, Traceveil does not collect or transmit to Roamer.one:
- complete browsing history;
- webpage contents;
- search queries;
- passwords;
- authentication tokens;
- form entries;
- private messages or email contents;
- payment or financial information;
- health information;
- precise physical location;
- keystrokes;
- files stored on your device;
- personally identifying fingerprint profiles;
- information for advertising or data-broker purposes.
Traceveil does not sell personal information.
Traceveil does not share browsing activity with advertisers, data brokers, credit-reporting agencies, or information resellers.
Traceveil does not use browsing activity to determine creditworthiness, eligibility for lending, insurance status, employment eligibility, or similar decisions.
6. How we use information
Information received through roamer.one or direct communications may be used to:
- provide, maintain, and secure the website and extension;
- respond to questions, feedback, or support requests;
- investigate bugs, abuse, vulnerabilities, or compatibility issues;
- improve Traceveil and other Roamer.one projects;
- communicate about a contribution or request initiated by you;
- comply with applicable legal obligations;
- establish, exercise, or defend legal rights.
We do not use personal information for unrelated purposes without appropriate notice or consent.
7. Legal bases for processing
Where the General Data Protection Regulation or similar legislation applies, we process personal information under one or more of the following legal bases:
- Consent: when you voluntarily send information or consent to an optional feature.
- Legitimate interests: to operate, secure, maintain, and improve the website and open-source project, provided those interests are not overridden by your rights.
- Performance of a contract or requested service: when processing is necessary to respond to or fulfil a request from you.
- Legal obligation: when processing is necessary to comply with applicable law.
- Protection of legal rights: when necessary to prevent abuse or establish, exercise, or defend legal claims.
You may withdraw consent where consent is the applicable legal basis. Withdrawal does not affect processing that occurred before consent was withdrawn.
8. Sharing of information
We do not sell or rent personal information.
We may disclose limited information to the following categories of recipients when reasonably necessary:
8.1 Infrastructure and service providers
Information may be processed by providers that host or support:
- the roamer.one website;
- email communications;
- source-code repositories;
- security, content-delivery, or domain-name infrastructure;
- public extension resources or updates.
These providers process information under their own contractual and legal obligations.
8.2 Browser and extension platform providers
Google may process information relating to the installation, updating, synchronization, verification, and use of Chrome and Chrome extensions. Google’s handling of this information is governed by Google’s own privacy policies and browser settings.
8.3 Legal and security disclosures
We may disclose information where we reasonably believe it is necessary to:
- comply with applicable law, regulation, court order, or lawful governmental request;
- investigate fraud, abuse, or a security incident;
- protect the rights, safety, or security of users, contributors, the public, or the Roamer.one project;
- establish, exercise, or defend legal claims.
8.4 Project restructuring
If responsibility for Roamer.one or Traceveil is transferred to another person or organization, relevant information may be transferred as part of that change. Where required, users will be notified and consent will be obtained before information is used for materially different purposes.
9. Chrome Web Store Limited Use disclosure
The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.
Information accessed through Chrome extension permissions is used only to provide or improve Traceveil’s disclosed browser privacy and anti-fingerprinting functionality, maintain security and reliability, comply with applicable law, or protect against fraud and abuse.
We do not transfer, use, or sell information obtained through Chrome extension permissions for personalized advertising, data-broker activity, creditworthiness determinations, or other unrelated purposes.
Humans do not read user data accessed by the extension except where:
- the user gives explicit consent for specific information to be reviewed in connection with support;
- access is necessary to investigate abuse or a security incident;
- the information has been aggregated and anonymized for legitimate internal operation; or
- access is required by applicable law.
10. Data retention
We retain personal information only for as long as reasonably necessary for the purpose for which it was received.
Typical retention practices include:
- routine web-server logs may be retained temporarily for security, troubleshooting, and operational purposes;
- support messages may be retained while the request is active and for a reasonable period afterward;
- security reports may be retained for as long as necessary to investigate, remediate, document, and prevent recurrence;
- records required for legal compliance may be retained for the period required by law.
Extension settings stored locally remain in the browser until they are removed by the user, reset by the extension, deleted through browser controls, or removed when the extension is uninstalled, subject to Chrome’s own synchronization and backup behaviour.
Where information is no longer required, we will delete it, anonymize it, or securely isolate it, subject to technical and legal limitations.
11. Security
We use reasonable administrative, technical, and organizational safeguards appropriate to the nature and sensitivity of the information under our control.
These measures may include:
- data minimization;
- local processing by default;
- restricted administrative access;
- encrypted network connections;
- dependency and source-code review;
- browser permission minimization;
- secure update mechanisms;
- vulnerability investigation and remediation.
No website, browser extension, storage system, or transmission method can be guaranteed to be completely secure.
Traceveil reduces certain privacy risks but cannot provide complete anonymity, prevent every form of tracking, or protect against all malicious websites, browser vulnerabilities, compromised devices, account-based tracking, network monitoring, or tracking performed through information voluntarily provided by the user.
12. International processing
The website, repository, email, browser platform, or supporting infrastructure may process information in countries other than the country where you live.
Privacy and government-access laws may differ between jurisdictions. Where required, appropriate contractual, organizational, or legal safeguards will be used for international transfers.
13. Your privacy rights
Depending on your location and applicable law, you may have the right to:
- request access to personal information we hold about you;
- request correction of inaccurate information;
- request deletion of information;
- object to or restrict certain processing;
- withdraw consent;
- request a portable copy of certain information;
- ask how information has been used or disclosed;
- lodge a complaint with an applicable privacy or data-protection authority.
Because Traceveil’s browsing-related processing is designed to occur locally and is not associated with a Roamer.one account, we may not possess browsing information that can be accessed, corrected, exported, or deleted on your behalf.
You can remove locally stored Traceveil information by resetting the extension’s settings, clearing its extension storage through Chrome, disabling Chrome synchronization where applicable, or uninstalling the extension.
We may need to verify your identity before responding to a request. We will respond within the period required by applicable law.
14. Children’s privacy
Roamer.one and Traceveil are not directed specifically at children, and we do not knowingly collect personal information from children for advertising or profiling.
If you believe that a child has submitted personal information to us, contact us so that the matter can be reviewed and the information deleted where appropriate.
15. Third-party websites and services
The roamer.one website and Traceveil may contain links to third-party websites, source-code repositories, browser stores, documentation, or other services.
We do not control and are not responsible for the privacy, security, content, or practices of third parties. Visiting or using those services is governed by their own terms and privacy policies.
Traceveil may block or modify interactions with certain third-party resources, but this does not make Roamer.one responsible for those resources or their privacy practices.
16. Open-source code and contributions
Traceveil and other Roamer.one components may be made available through public source-code repositories.
Information submitted publicly to a repository—including usernames, profile information, issue reports, discussions, commits, pull requests, and code contributions—may become publicly accessible and may be retained in repository history.
Do not include passwords, authentication tokens, private browsing data, sensitive personal information, or confidential information in public issues or contributions.
Repository providers process account and usage information according to their own privacy policies.
17. Changes to this policy
We may update this Privacy Policy when:
- the website or extension changes;
- new features or services are introduced;
- data-handling practices change;
- legal or Chrome Web Store requirements change;
- service providers or project responsibilities change.
The updated version will be posted on roamer.one with a revised “Last updated” date.
If a change materially affects how Traceveil collects, uses, or shares user data, we will provide additional notice or obtain consent where required before the new practice takes effect.
18. Contact and privacy requests
Questions, privacy requests, complaints, or security concerns may be sent to:
Email: privacy@roamer.one
Website: roamer.one
Location: Ontario, Canada
Please include sufficient information for us to understand and respond to your request, but do not send passwords, authentication credentials, complete browsing histories, or unnecessary sensitive information by email.
For security vulnerabilities, please use the project’s designated private security-reporting channel where one is available.