What we don't collect
Information we do collect
For paid users, we collect the minimum information necessary to issue and validate your license:
- Email address — provided at checkout, used to deliver your license key and to communicate about your purchase.
- License key & device hash — sent to our verification server every 24 hours to confirm activation status. The device hash is a non-reversible fingerprint; we cannot identify your device from it.
- IP address & timestamp — automatically logged by our infrastructure provider (Cloudflare) for security and abuse prevention. Retained for 30 days.
Paid plans are sold by Lemon Squeezy as the Merchant of Record. Lemon Squeezy independently collects and retains purchaser information (including email address, billing details, and order history) under its own Privacy Policy.
Third-party processors
| Service | Purpose | Data shared |
|---|---|---|
| Lemon Squeezy | Merchant of Record — sales, payment processing & tax compliance | Name, email, billing details, card data (collected and retained by Lemon Squeezy under their own Privacy Policy) |
| Cloudflare (Workers & D1) | License verification API & storage | License key, device hash, email, IP, timestamp |
| Resend | Transactional email delivery | Email, license key, message body |
Cookies & analytics
The website uses only essential cookies. We do not use Google Analytics or any cross-site tracking. Cloudflare may set short-lived cookies for security purposes.
Data retention
- License records: retained while your license is active.
- Payment records: retained for 7 years to comply with tax law.
- Server logs: 30 days.
- Refunded purchases: license deactivated; email and order ID retained for fraud prevention.
Your rights
You may request to access, correct, or delete your data at any time by emailing [email protected]. We will respond within 30 days. Note that deletion of license records will deactivate your license.
International transfers
Our infrastructure is operated by Cloudflare on a global edge network. Data may be processed in regions outside your country, including the United States and the European Union. We rely on our providers' contractual safeguards (DPAs, SCCs) for compliance.
Children
The Software is not directed to children under 13 (or under 16 in the EU). We do not knowingly collect personal information from children.
Changes to this Policy
We may update this Privacy Policy. Material changes will be announced on this page with a revised "Last updated" date.
Contact
Privacy questions? Email [email protected].