Privacy policy

Short version

Email, password hash, order history, the licences on your account. We never see your card number. No data sold, no ad trackers, no profile built on you.

What we collect

Account: email and a hashed password.
Orders: what you bought, when, for how much, and the processor's reference.
Licences: keys on your account, redemption dates, and a hardware identifier so one key can't run on several machines.
Support: your messages and attachments.
Technical: IP address and a short server log per request.

What we don't

No real name, address, phone number or date of birth. No identity documents. Nothing read off your machine beyond the hardware identifier above.

Payments

Card payments are handled entirely by the processor. We get a reference, the last four digits and whether it worked. Crypto is a transaction hash.

Cookies

One session cookie to keep you signed in, one that remembers your key-length choice. No analytics, no advertising, no third-party trackers.

Retention

Orders seven years, which is what tax and payment rules require. Support two years. Server logs thirty days.

Sharing

Payment processors and our host. Nobody else. We disclose if legally compelled and will tell you unless we're barred from it.

Your rights

Ask for a copy, a correction or deletion. Email support from the address on the account. Thirty days.

Security

Passwords hashed, traffic encrypted, production access limited. If we're ever breached we'll tell you directly.