Privacy Policy

Last updated: November 8, 2026

Short version

1. Who is responsible (data controller)

【TODO: 你的姓名或工作室名称】 ("we", "us") is the controller for the personal data described below. Contact: 【TODO: support@yourdomain.com】.

2. What data we collect and why

Data Why Legal basis (GDPR)
Email address (from your Paddle checkout) Deliver your license key; license recovery; refund notices Contract performance
Order / transaction ID Match a license to a payment; verify refunds; license-recovery anti-abuse Contract performance
License key & activation record (random device fingerprint, device name, timestamps) Enforce the 5-device activation limit; let you unbind devices Contract performance
Server request logs (IP address, timestamp, user agent — kept briefly by Cloudflare) Security, abuse and fraud prevention Legitimate interest
Support correspondence Answering your requests Contract / legitimate interest

The device fingerprint is a random identifier generated on your device — it contains no personal identity and cannot be linked back to you by us.

3. What we do NOT collect

4. Cookies

This website itself sets no tracking cookies. We display a one-time notice because our payment provider Paddle may set strictly-necessary cookies during checkout (fraud prevention and payment security). You can clear them anytime via your browser. See Paddle's Privacy Policy.

5. Third-party processors

These providers process data on our behalf under data-processing agreements and may process data outside your country (including the US). Where required, transfers rely on the EU Standard Contractual Clauses or equivalent safeguards.

6. Retention

License records are kept as long as your license is active and for up to 3 years afterwards (so we can honour "retrieve license" requests and handle disputes). Server logs are kept by Cloudflare for a short period per their default settings. Paddle retains billing records for the statutory tax-accounting period.

7. Your rights

EEA / UK (GDPR): access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint with your local supervisory authority.

California (CCPA/CPRA): we do not "sell" or "share" personal information as defined by the CCPA. You may request disclosure or deletion of the data listed in Section 2.

Other regions: we honour equivalent requests where local law provides them.

To exercise any right, email 【TODO: support@yourdomain.com】 from the address you purchased with. We respond within 30 days. Deletion of license records means your key can no longer be recovered or re-validated.

8. Children

The Software is not directed at children under 16, and we do not knowingly collect their data.

9. Security

All traffic is served over HTTPS. Access to license records is restricted to the licensing service. We store the minimum data described above precisely because less data means less risk.

10. Changes

Material changes to this policy will be reflected in the "Last updated" date above.