Privacy
Last updated 20 August 2026
We collect the least we can get away with. No advertising trackers, no data sold, no profile built about you across the web. This page is short because there is not much to say.
What we collect, and why
When you buy
- Your name and email. To deliver your files and to identify you when you come back for them. Your name is also sent to the payment provider, because a charge that carries no cardholder identity is far more likely to be declined by your own bank.
- Your order contents and amount. To know what to deliver and what you own.
- Records of delivery and download. Timestamps, IP address and browser, plus the exact wording of the consent you gave at checkout. Explained below.
We never see or store your card details. Those go directly to Dodo Payments, who are the merchant of record, and they never pass through this site.
When you just visit
Page views, in aggregate, so we know which products people look at. No cross-site tracking, no advertising pixels, no fingerprinting, and no cookie banner because there is nothing to consent to.
Why we keep delivery records
This is the one area where we deliberately keep more than the minimum, so it deserves a straight explanation.
Card networks built their dispute rules around physical delivery, with signatures and tracking numbers. A digital product produces none of that. If somebody tells their bank they never received or never authorised a purchase, the only thing that answers the question honestly is a record showing when the licence was issued, when the file was downloaded, from what address, and what the buyer agreed to at checkout.
That record protects you as much as us. It is what lets us confirm quickly and accurately that a charge on your statement was or was not yours.
These records are kept for six years, which is the period during which a payment can still be questioned or a tax authority can ask about it. They are never used for marketing and never shared with anyone except where needed to answer a payment dispute or where the law requires it.
Who else touches your data
- Dodo Payments, merchant of record. Handles payment, billing and tax. Receives your name, email and order contents.
- Supabase, database and file storage.
- Vercel, hosting.
- Resend, email delivery.
That is the complete list. We do not sell data, we do not share it with advertisers, and we do not have an affiliate network reading your behaviour.
How long we keep things
- Order and delivery records: six years.
- Your account and licence keys: until you ask us to remove them.
- Newsletter subscription: until you unsubscribe.
- Support messages: two years, then deleted.
Your rights
You can ask for a copy of everything we hold about you, ask us to correct it, or ask us to delete it. Email us and we will do it within thirty days, usually the same week.
On deletion: we anonymise rather than destroy. Your name, email and address are removed and your identifier is rotated, so what remains cannot be connected back to you. The order and delivery record itself is kept in that anonymised form, because a payment can still be questioned for years afterwards and because tax rules require it. Anonymised records of that kind fall outside data protection law precisely because they no longer identify anyone.
Deleting your account does not remove licences you have already bought from your own machine, and it does mean we can no longer identify you if you need your files again. We will say so before doing it.
Children
This is a professional developer tool and is not directed at children. We do not knowingly collect data from anyone under sixteen.
Contact
Any privacy question, including a request for your data, goes to the contact page and reaches a person, not a queue.