← trace

Privacy Verification Guide

Trace stores all data locally. The CLI makes no outbound network calls except three documented operations: opt-in update checks, pricing table fetch, and install verification.

Verify on macOS

Little Snitch: install and monitor — Trace will show zero connection attempts except the documented three.

Wireshark: sudo tcpdump -i any -n host trace.bluemetatech.com

nettop: nettop -p $(pgrep trace)

Verify on Linux

opensnitch: install and monitor all outbound connections.

tcpdump: sudo tcpdump -i any -n 'not port 22'

ss: ss -tunp | grep trace

Verify on Windows

Wireshark: capture on all interfaces, filter for trace.exe.

netstat: netstat -b | findstr trace

Full Offline Mode

Block all network access for the trace binary via your OS firewall. All features work offline — only pricing table updates and update checks are affected.

If you find an undocumented network call, report it: malik@bluemetatech.com