Privacy

The short version

We hold what is needed to sell you access and keep your account secure. There is no advertising, no analytics, no third-party tracker, and no profile of how you use the site. Nothing is sold or shared.

What we hold

• Your email address — it is your account name, and where we send confirmation and reset links.
• Your password, hashed — stored using scrypt, a deliberately slow function. We cannot read it, and neither can anyone who obtains the database.
• Your license records — what you hold, when it started, and when it expires.
• Your member number and the date it was issued.
• Purchase records — the product, the term, the amount, the amount of bitcoin received and its value at the time, and the country you were in when you paid. Payment happens directly from your wallet to ours: we never receive or store wallet credentials, and there is no card data to hold.
• Sign-in details — the IP address and browser user-agent recorded against a session or a sign-in in progress, used to keep accounts secure.
• Two-factor secrets, if you switch it on — stored encrypted, plus single-use recovery codes stored hashed.

Device information

An account covers a limited number of machines. To enforce that, when you pair the loader we record an identifier for the machine.

• It is a one-way hash of information about the machine, mixed with a secret held on our server. The underlying values never leave your computer, and the stored hash cannot be turned back into them or matched against the same machine on another site.
• We also record a short name for the machine, if the loader supplies one, so you can recognise it in your account.
• It is used to count machines and nothing else — not analytics, not profiling, not advertising, and never to identify you outside this service.
• You can see every machine on your account at any time.

What we do not do

• We do not sell, rent or share your data with anyone.
• We do not run advertising, analytics, or any third-party script — the site ships no JavaScript at all.
• We do not publish who bought what.
• We do not build a profile of your browsing, on this site or anywhere else.

How long we keep it

Each of these is enforced by a scheduled job, not by intention. The shorter periods exist because the data has no further use.

• Account and license records — while your account exists, and afterwards only as long as accounting rules require.
• Purchase records — the same, because they are your receipts as well as our accounts.
• Sessions — up to 30 days, or immediately when you sign out.
• Sign-in attempt counters — 48 hours. These contain an email address or an IP address, which is why they are not kept longer.
• Pairing codes — 15 minutes, and a day after use at the very most.
• Loader access tokens — 60 seconds.
• Device records — deleted 12 months after the machine was last used.
• Security log — 24 months.

A member number is recorded as issued even if the account is closed. It is never reissued to anybody else, which is the whole point of it.

Your rights

You can ask for a copy of what we hold about you, ask us to correct it, ask us to delete your account, or ask for your data in a portable form. Write to the address below and we will respond within a month.

If you are unhappy with how we have handled it, you have the right to complain to the data protection regulator in your country.

Contact

Anything at all, including these requests: [email protected].