These terms are the agreement between you and urTRACE for using the hosted service at urtrace.app. By creating an account or using the service, you agree to them.
In short. Use urTRACE lawfully and only with prototypes and testers you're entitled to. You keep ownership of your content; we host it to run the service. The service is provided "as is," and you're responsible for the data you collect from your testers.
By creating an account or using urTRACE, you agree to these Terms and to our Privacy Policy. If you're using urTRACE on behalf of an organization, you confirm you're authorized to accept these terms for it. If you don't agree, don't use the service.
urTRACE lets you import prototypes, define task-based usability tests, share them with testers, and review the resulting sessions as heatmaps, statistics, timings, and exports. Features may change, improve, or be removed over time. The service is operated from Norway and hosted in the United Kingdom. These terms cover the hosted service; a self-hosted deployment you run yourself is your own responsibility.
You agree not to:
We may suspend or remove content or accounts that violate these terms or put the service or its users at risk.
You keep ownership of the prototypes, tests, and data you bring to or create on urTRACE. To run the service, you grant us a limited license to host, store, process, and display that content solely to provide the service to you and your team. We don't claim ownership of your content and don't use it for any purpose other than operating the service.
When you run a study, you decide what to ask your testers and why. You are responsible for:
For the data your testers produce, you act as the data controller and urTRACE as your processor, as described in the Privacy Policy and the Data Processing Agreement below.
urTRACE integrates with third-party services - for example Figma (prototype import) and AI providers you connect with your own API key. Your use of those integrations is also subject to the relevant third party's terms, and any keys you provide are used only to perform the action you requested.
We work to keep urTRACE available and reliable, but the service is provided "as is" and "as available," without warranties of any kind, whether express or implied, including merchantability, fitness for a particular purpose, and non-infringement. We don't guarantee the service will be uninterrupted, error-free, or that data will never be lost - keep your own copies of anything important.
To the fullest extent permitted by law, urTRACE and its operator will not be liable for any indirect, incidental, special, consequential, or punitive damages, or for lost profits, revenue, or data, arising from your use of the service. Nothing in these terms excludes liability that cannot be excluded by law.
You can stop using urTRACE and delete your account at any time. We may suspend or terminate access if you breach these terms or if we need to for legal, security, or operational reasons. On termination, your right to use the service ends; provisions that by their nature should survive (such as ownership, disclaimers, and liability limits) will continue to apply.
We may update these terms as the service evolves. When we make material changes, we'll update the date at the top of this page. Continuing to use the service after a change means you accept the updated terms.
These terms are governed by the laws of Norway, and any disputes will be subject to the ordinary courts of Norway, without regard to conflict-of-laws rules. If you are a consumer resident in the EU/EEA, this does not deprive you of the mandatory protections of the consumer-protection law of your country of residence, and you may also bring proceedings there.
When you use urTRACE to collect personal data from your testers, you act as the data controller and urTRACE (Thode Media) acts as your processor. This section forms a data processing agreement between you and us under Article 28 of the GDPR and applies whenever we process personal data on your behalf. You accept it by agreeing to these Terms - it needs no separate signature, though we can provide a countersigned copy on request.
We process personal data only to provide the service described in these Terms: hosting your prototypes and studies, recording tester sessions, and making the results available to you. The processing lasts for as long as you use the service and hold the relevant data. The personal data and the categories of data subjects are determined by you through the studies you configure - typically your testers, and the questionnaire answers (which may include demographics such as age, gender, or occupation), free-text comments, and interaction telemetry described in the Privacy Policy.
We process this personal data only on your documented instructions - which include these Terms, the Privacy Policy, and your configuration and use of the service (the questions you set, the studies you run, and the exports or deletions you request) - unless we're required to process it by law, in which case we'll tell you first unless the law forbids it. We'll also tell you if, in our opinion, an instruction infringes data-protection law.
We keep the personal data confidential and ensure that anyone authorized to process it is bound by an appropriate duty of confidentiality.
We implement appropriate technical and organizational measures under Article 32, including the encryption at rest and in transit, password hashing, and access controls described in the Privacy Policy's "How we protect it" section.
Paid plans and credit packs are sold through Paddle, which acts as the merchant of record. That means Paddle - not Thode Media - is the seller for those purchases: it takes the payment, issues the receipt, and is responsible for charging and remitting any VAT or sales tax due. Your purchase is therefore subject to Paddle's own terms in addition to these, and card details are held by Paddle and never by us.
Prices are shown in the currency and tax treatment Paddle applies at checkout. A subscription renews automatically until cancelled; you can cancel at any time from the billing portal linked in your account, and access continues to the end of the period you have already paid for. We do not pro-rate a cancellation mid-period. Credits bought in a pack do not expire; they are separate from any monthly allowance included with a plan, and deleting data does not return them. Refunds are handled by Paddle under its refund policy and applicable consumer law - where a credit pack is refunded, the corresponding credits are removed from the account.
You give us general authorization to engage the subprocessors listed in the Privacy Policy's "Who we share with" section - currently Cloudflare, our United Kingdom hosting provider, and Resend, plus Figma and any AI provider only when you choose to use them. We bind each subprocessor to data-protection obligations no less protective than those in this section, and we remain responsible for their performance. We'll give you reasonable advance notice of any new or replacement subprocessor so you have a chance to object.
Taking into account the nature of the processing and the information available to us, we'll help you meet your own obligations to: respond to tester requests to exercise their rights (access, correction, deletion, and the others in Articles 12-23); keep the data secure and handle personal data breaches; and carry out data-protection impact assessments and any prior consultation. In practice, the service already lets you delete individual sessions, tests, or your whole account at any time, and recorded sessions auto-delete 90 days after collection.
We'll notify you without undue delay after becoming aware of a personal data breach affecting the data we process for you, with the information you reasonably need to meet your own notification duties.
We process the data in the United Kingdom, which the European Commission recognizes as providing an adequate level of protection (see the Privacy Policy's "Where your data is processed" section). We won't transfer it elsewhere without appropriate safeguards such as standard contractual clauses.
On termination, or on your request, we'll delete or return the personal data we process for you and delete existing copies, unless the law requires us to keep it.
We'll make available the information reasonably necessary to demonstrate compliance with Article 28, and allow for and contribute to audits by you or an auditor you mandate - subject to reasonable notice, confidentiality, and not compromising the security or the data of other customers.
If anything in this section conflicts with the rest of these Terms about how we process tester personal data on your behalf, this section governs.
Questions about these terms? Contact [email protected].
This service is operated by Thode Media (org. no. 932 710 986), a sole proprietorship (enkeltpersonforetak) registered in Norway, run by Cédric Andrés Thode.