Legal
Privacy notice
This notice explains what personal information the TraceGrid website collects, why, and what you can do about it. It is written with the Protection of Personal Information Act (POPIA) in mind.
Last updated 22 October 2026
Who we are
This website is run by Cybernaut Studio (Pty) Ltd ("Cybernaut Studio", "we", "us"), based in Johannesburg, South Africa. For the purposes of POPIA, we are the responsible party for personal information collected through this website.
This notice covers the website only. Information you store in the TraceGrid platform as a customer is covered by your subscription agreement and our operator agreement with you.
What we collect
- Standard server logs. Our hosting provider, Cloudflare, records technical details of each request to the site, such as your IP address, browser type, the page requested and the date and time. We do not use these logs to identify you.
- Emails you send us. If you email us, we receive your name, email address and anything you choose to include, such as your company details.
- Cloudflare Web Analytics. Counts visits to each page (including the campaign links described below), the referring site, browser and country, and page load times. It sets no cookies, stores nothing on your device and builds no profile of you: we only see totals.
- Google Analytics 4, with your choice. Tells us which pages and parts of the demo are used: pages viewed, which calls to action were clicked, which guided tours were started and finished, and technical details such as device type, browser and approximate location (country and city, not your IP address). We never send it your name, anything you type, the names or contents of files you import, or anything else you enter in the demo.
There is no advertising on the site and no forms that send information to us.
Cookies and your choice
On your first visit we ask whether you accept analytics cookies. Google Analytics only sets its
cookies (named _ga and _ga_…) if you choose "Accept analytics". If you
choose "Decline", no Google Analytics cookies are set. Google may still receive basic
measurement without cookies or identifiers, such as that a page was viewed, so we can count
visits in total; this cannot be linked to you across visits.
Your choice is stored in your browser and applies to the website and the demo. You can change it at any time with "Cookie settings" in the footer of every page or in the demo's account menu. Withdrawing your consent removes the Google Analytics cookies from your browser.
Campaign links
Links we send you, for example by email, may carry a campaign reference (such as /go/p017) so we can see whether a link was opened. That is measured without
cookies, and the reference tells us which message was opened, not who you are.
The interactive demo
The demo at /demo runs entirely in your browser. Everything you do in it is stored only in your browser's local storage on your device, including:
- the records you create or change (quotes, orders, deliveries, progress and so on);
- any BOQ file you import, which is read on your device and never uploaded;
- photos you take in site mode.
None of it is sent to Cybernaut Studio or anyone else. "Reset demo" removes it, as does clearing this site's data in your browser settings. Analytics only record that demo features were used (for example that a guided tour was started, or that a BOQ with a number of lines was imported), never what you entered.
Why we use it
- Server logs help keep the website running, secure and free of abuse.
- Analytics show us which pages and demo features are useful, so we can improve them, and whether the links we send are opened.
- Your emails let us reply to you, arrange walkthroughs and consider founding customer applications.
We process this information because it is necessary for these legitimate purposes, or because you chose to contact us. We do not sell or rent personal information, and we do not use it for marketing you did not ask for.
Who we share it with
Only with the service providers who host this website and our email and who provide the analytics described above (Cloudflare and Google), and only so they can provide those services. Both operate globally, so server logs and analytics data may be processed outside South Africa, subject to their own data protection commitments. We will also disclose information if the law requires us to.
How long we keep it
Server logs are kept by our hosting provider for a limited period under its retention policy. Google Analytics data is kept for 14 months, then deleted. Cloudflare Web Analytics keeps only totals. We keep emails for as long as we need them to deal with your enquiry and any relationship that follows, and delete them when they are no longer needed, unless the law requires us to keep them longer.
Your rights
Under POPIA you may:
- ask whether we hold personal information about you, and for a copy of it;
- ask us to correct or delete it;
- object to us processing it;
- complain to the Information Regulator of South Africa at inforegulator.org.za.
Information Officer
Our Information Officer is Jean-Jacques Strydom. Send any privacy request or question to [email protected].
Changes to this notice
If what we collect changes, we will update this notice first and change the date at the top of the page.