Trace

Trace keeps a private, local record of which websites hold your personal information email, phone, username, and address fields so that when you move, change your number, or clean up after a data breach, the list of everywhere you need to update already exists.

It works passively: as you submit forms during normal browsing, Trace notes which site received which type of field and builds a searchable ledger, with first-seen and last-seen dates for every entry.

Local-first, no account, no server. Trace makes no network requests of its own. Your ledger is stored only in your browser, on your device, and field values are encrypted at rest before they are stored. Nothing is transmitted, sold, or shared. The only way your data leaves your device is if you explicitly export it yourself.

Passwords and card security codes are never recorded. They are detected only so they can be deliberately skipped, and cannot be stored in any form.

Pairs with the Trace desktop app: export your ledger from the extension and import it into the encrypted desktop vault for durable, offline review or export a plain spreadsheet whenever you need it.