Privacy
What we collect, and what we do not
TrueByte LLC runs this site and builds WAVE. This page says exactly what happens to anything you type here. It's a two minutes read.
Last updated 28 August 2026
The part most people are actually asking about: WAVE never sends us your test data. WAVE runs on your own machine, and never sends anything out. Your tests, your credentials, your hosts, your results and your reports stay on that machine and are never transmitted to us. We hold none of it, so there is nothing for you to ask us to return or delete. That is a property of how the product is built, not a promise we are asking you to trust.
What this website collects
Five things happen on this site. Three of them collect anything at all, and no analytics company, ad network or tracking service touches any of them. The only other companies in the picture are the one that runs our server and the one that carries our mailbox, both named below.
| The cost calculator | Collects none of your numbers. It runs entirely in your browser, asks for no email address, and never sends them anywhere. The report it exports is generated by your browser and saved to your own device. We never see the numbers you enter. The page it sits on is measured like every other page here, so we can see that you used the calculator, but never a number you put into it. |
|---|---|
| The videos | They are files served from this site. There is no video platform embedded here, so no third party learns that you watched. Our own measurement records which video was played and roughly how far through it you got. Nothing else. |
| The application form | Collects what you type into it. That is the whole of it, and it is listed below. |
| The price request form | Collects what you type into it, including the seat count you ask about. The price it shows you is worked out in your browser from the rates on the page. That is the whole of it, and it is listed below. |
| Page measurement | Counts the visit and records which parts of the page were read. It is ours, it runs on our own server, and it is described below. |
What the two forms collect
- Your name and your email address.
- Your company. On the application, also your role and, if you choose to give it, where your office is.
- Your answers to the application's questions: what you test by hand today, roughly how many engineers would use WAVE, which systems your tests touch, whether you can run software on your own machines, and whether you can approve or sponsor spend.
- Your answers to the price request's questions: how many seats you asked about, and, if you choose to give it, what your tests run against. We keep the price for that seat count next to it, so we can see what you were shown.
- Anything you choose to write in the free-text boxes.
- How long you took between opening the form and sending it, and a hidden box you cannot see that only an automated browser would fill in. We use both to tell a real submission from an automated one.
- We also work out some things ourselves and show them next to what you sent: whether your email address uses a personal mail provider rather than a company domain, whether another of the same kind has already come from the same network address, and anything that suggests the form was filled in by a machine.
- The date and time you submitted, and your network address, the IP address your connection uses, which arrives automatically with any web request. If you send either form, we keep that address alongside what you sent, so we can see roughly where it came from and recognize anything that looks like abuse. We do not keep anything identifying your browser.
Nothing you type is captured before you press submit. If you start typing and change your mind, nothing you wrote is recorded or sent. The measurement described below does record that a form was opened and closed, which of the two it was, and when, the same way it records the other buttons on the page.
What we measure on this site
We want to know which parts of a page are read and which are skimmed past, so we can fix the ones that are not working. This happens on the home page, on the cost calculator page, on the What WAVE does page, and on this one. One record is sent when you leave the page, containing:
- Which sections came into view, in what order, and how long each was actually on screen. Time stops counting when the tab is in the background, and starts again when you come back. Only the home page and the cost calculator are divided into sections. The privacy page and the What WAVE does page record the visit but no sections.
- How far down the page you got, and how long you were actually on it.
- Which of the page's own controls you used. On the home page: the calculator, the videos and how far through one you got, the price detail, how these numbers work, the What WAVE does list, notes like this one, the application form, and the price request form. Each one is recorded as a name and the time you clicked it, and nothing else. On the calculator: whether you got a result, created a report, or saved the calculator to your device. Not what you typed into any of them, and nothing here is recorded or replayed.
- The size of your browser window, whether it is a phone or a desktop, the page or campaign link you arrived from, and the site of any link you follow away from here.
Every visit is also marked as looking like a person or looking automated, and we record why. A visit is marked automated if the browser reported itself as automated, or if nothing was scrolled, typed, tapped or moved in the first eight seconds. Opening a page in a background tab is recorded too, but on its own it does not make a visit automated. Visits marked automated are not counted in our figures.
If you send either form, it is linked to the reading session it came from. The page gives each visit a random reference and forgets it when you close the tab. If you send one, that reference goes with it, so we can see what you read, how long you spent on each part and what you clicked, alongside your name. This is only done to figure out what parts of the page are boring and should be improved or thrown out. If you send neither, nothing connects your reading to you.
If you send either form, we keep your network address alongside what you sent. Every visit carries a one-way fingerprint of the address it came from, so we can see other visits from the same address, including what you read before you sent it. A network address is often shared and often changes, so that is a rough match and never proof of who someone is. It is still what lets us spot and block abuse.
No cookies, and nothing is stored on your device unless you ask for a file. That is why you were never asked to accept anything. If you only read the page and send neither form, your network address is never written down as it is. It is turned into a one-way fingerprint first, which lets us stop automated abuse without holding the address. The exception is a visit flagged as suspicious, where the address is kept so it can be blocked. We also keep a short list of network addresses whose visits we do not count at all, so our own visits stay out of our figures.
This runs on our own server. No analytics company is involved, nothing is sent anywhere else, and we cannot tell who you are. There is nothing on your device to recognize you by. The one-way fingerprint above is the same every time the same address is seen. That is how automated abuse is stopped, and how the earlier visits of someone who sent a form can be found, as described above. Nothing else here follows a reader over time. These records are kept for twelve months.
Why we collect it
To read what you sent, to prepare for a conversation with you, and to reply to you. To see which parts of these pages are worth keeping. That is all. We do not build advertising profiles, we do not score you, and we do not sell, rent or share your details with anyone.
Who handles it
- TrueByte LLC. One person, the founder, reads every application and every price request. Nobody else has access.
- Spaceship Inc, which runs the server this site is served from, where what you send is stored, and which sends the notification of it to us.
- Google Workspace, which carries our mailbox, and therefore holds the notification of what you sent and any reply we send you.
No other company is involved in any of it. There is no third-party analytics service, no advertising network, no customer relationship system, no marketing automation and no CAPTCHA service. The measurement described above is our own code writing to our own database on the server named above.
How long we keep it
Applications are kept for as long as the founding partner program is open, and for twelve months after it closes, so we can come back to people we could not fit in. Price requests are kept for twelve months from the day they arrive. After that both are deleted. If you ask us to delete yours sooner, we delete it sooner. If we cannot store what you sent, we record the failure so we can find out why, and your email address is in that record. We delete those records after sixty days.
How to have it deleted
Email wave@truebyte.io and say so. You do not need to give a reason or fill in a form. We will delete your application, your price request, and any failure record holding your email, and confirm it within thirty days, usually much sooner. You can also ask us for a copy of what we hold about you, or ask us to correct it.
Deleting what you sent removes the only thing connecting your name to what you read. The reading record itself stays, with nothing left to attach it to, and is deleted after twelve months like every other one.
Cookies
This site sets no cookies and stores nothing on your device unless you ask it to save a file. No other company tracks you here. There is nothing here for you to accept or decline, which is why you were not asked.
Children
This is a business product sold to engineering teams. It is not directed at children and we do not knowingly collect anything from them.
Changes to this page
If we change what we collect, we change this page and update the date at the top before the change takes effect.
Who to contact
The data controller is TrueByte LLC. For anything on this page, including a deletion request or a security concern, write to wave@truebyte.io and a person will answer.
TrueByte LLC17200 116th Ave SE
Renton, WA 98058
USA