How long have you been giving your email to everyone?
Rebuild your digital footprint from the traces in your emails: TraceGraph reads your mail and lists the services. Then you decide who to unsubscribe from.
- Windows · coming to the Microsoft Store
- Mac · coming
For Windows and Mac (Mac is coming). Your data stays on your computer: no account, no server that receives your emails.
My services
41 services detected via email
The problem
You don't remember them. It does.
A contest in 2016. An online shop you used once. A workout app you tried for two weeks. Those are examples, but your inbox is full of things like that, and each of those services still has your address.
How it works
Five steps, no account.
Connect your mail
Gmail and Outlook.com with sign-in in your browser, or any other mailbox with an app password.
TraceGraph reads your mail read-only: it does not move or delete messages. The first scan reads the last three years; the rest of the mailbox history is read in the background.
Add email
Add a new email account
Use an App Password, not your main account password.
Read the list
For each service you see since when it has been writing to you, what kind of messages it sends (newsletters, receipts, security alerts) and which categories of data appear in your emails: those found in the messages, not what the service holds.
Recognition uses hand-written rules, not artificial intelligence.
Based on the emails received, this service appears to process:
Stops promotional emails, newsletters and notifications. Service communications (logins, receipts, security) are not affected.
Check for breaches
When you want, a button compares the services found with known breaches. TraceGraph downloads the public list from Have I Been Pwned and does the comparison on your computer.
It never runs by itself. The domains of your services are not sent to Have I Been Pwned: only if you enter your own optional personal key does the account address reach it. Never the content of your emails.
Breach exposure
1 of 41 checked services in known breaches
No domain of your services is sent to Have I Been Pwned: TraceGraph downloads the public list of breaches (with none of your data) and compares it on your computer. Only if you use your personal key, the account address is sent to Have I Been Pwned for the email lookup.
Unsubscribe
With one click if the sender allows it. Otherwise its page opens, or you get an email draft that you send yourself. TraceGraph never sends email on your behalf.
A history is kept, and if a sender keeps writing to you, you see it among the anomalies.
Unsubscribes
3 unsubscribe requests · 1 confirmed
Exercise your rights
For a service you can prepare a GDPR letter: access to your data, erasure, stop marketing, and a reminder if it does not answer. The app writes the text and opens a draft in your mail.
You send it: TraceGraph sends nothing, and you type the recipient's address yourself. The "Find the privacy policy" button opens a DuckDuckGo search in your browser, only when you press it.
Erasure
Ask to delete your data and close your account.
1. Who to write to
3. Send from your mail
A draft opens in your mail. You send it: TraceGraph sends nothing.
Why trust it
What it reads, what it keeps, what it doesn't do.
Reads
- Message headers: sender, subject, date.
- At most the first 128 KB of each message, to recognize the service and find the unsubscribe link.
- Only the mailbox you connect. It does not read other apps or browsers.
Keeps, on your computer
- For each message an excerpt of about 1,500 characters, never the full text. No attachments.
- App passwords and sign-in tokens, encrypted with your operating system's encryption.
- Everything in a database on your computer. Remove the profile to delete it.
Doesn't do
- No account is needed and no TraceGraph server receives your emails.
- No usage statistics in the public version. Only in the beta version, and only if you accept, pseudonymous usage statistics (numbers and codes). No artificial intelligence on your messages.
- It does not send email and does not modify or delete messages.
What leaves your computer
Only what the job needs: the connection to your mail, the Google or Microsoft sign-in, the download of the public list from haveibeenpwned.com when you press the breach check (your address only if you enter your own optional key), and requests to senders' sites when you unsubscribe. Only in the beta version, and only if you accept, pseudonymous usage statistics too. The full list is in the privacy policy.
FAQ
What people ask us.
Do I need a TraceGraph account?
No. There is no TraceGraph account. You connect your mail and that's it.
Why does Google ask for such a broad permission?
To read Gmail over IMAP, Google requires its broadest mail permission ("https://mail.google.com/"). There is no read-only version for IMAP. TraceGraph opens folders read-only and its code contains no commands to modify, move or delete messages, but the permission granted stays the same. You can revoke it at any time.
Can I send GDPR letters to companies?
Yes: access to your data, erasure, stop marketing and a reminder. TraceGraph prepares the text and opens a draft in your mail; you send it and the app sends nothing. For each request you mark as sent it stores only the service, type, language, dates and status: not the text, the recipient or your name. This is general information, not legal advice.
Does TraceGraph send statistics about how I use the app?
Not in the public version. The beta version for testers asks for your consent, off by default: if you accept, the app sends its developer only numbers and codes tied to a random code (never addresses, senders, subjects, texts or service names). You can decline or change your mind in Settings, and the app works the same.
How do I revoke access?
Remove the profile in the app, which revokes the Google access, or use the permissions page of your Google account. For Microsoft, use the permissions page of your Microsoft account. App passwords are revoked with your provider.
Does it delete my accounts?
No. It helps you unsubscribe from newsletters, shows where you are registered and can prepare a letter asking for your data to be erased, which you send yourself. To close an account you have to do it on the service's own site.
Does unsubscribing always work?
No, it depends on the sender. TraceGraph tells you whether the request was accepted, whether you need to open a page or whether you must send an email yourself. It never reports an unsubscribe as done when it isn't.
Which computers does it run on?
Windows and Mac. The Windows version is coming to the Microsoft Store; the Mac version is coming, with no date yet. There are no versions for Linux or phones.
How much does it cost and when is it out?
The price is not decided yet and there is no date. The Windows version will be on the Microsoft Store, where you will find price and availability. There is no date for the Mac yet.
What language is the app in?
Today the app is mainly in Italian. The English version is in progress.
Coming to Windows and Mac.
- Windows · coming to the Microsoft Store
- Mac · coming
Questions before then: support@tracegraph.app.