Privacy Policy

Last updated: 15 August 2026

What we collect

We collect only what's necessary to provide the service:

  • Email address — to identify your license and send login links.
  • Name — collected at device activation, baked into your license file.
  • Device ID — the hardware identifier from your device, stored to track activations.
  • Purchase data — received from Gumroad when you buy (sale ID, license key, timestamp).

What we don't collect

  • Passwords — we use passwordless (magic-link) authentication.
  • Usage telemetry — the device does not phone home. last_seen_at is currently always null.
  • Payment card details — all payments are handled by Gumroad.

How we use your data

Your data is used solely to: authenticate you, manage your license, generate license files, and send transactional emails (login links, purchase confirmation). We do not send marketing emails unless you explicitly join the waitlist.

Data sharing

We share data only with:

  • Gumroad — to verify purchases (server-to-server API call).
  • Our email provider (Resend or Postmark) — to deliver transactional email.

We do not sell your data. We do not share it with advertisers.

Data retention

We retain your account data for as long as your license is active. You can request deletion by emailing us — note that deleting your account will invalidate your license.

Your rights (UK/EU)

You have the right to access, correct, or delete your personal data. Contact us at hello@tomhay.es.

Cookies

We use a single session cookie to keep you logged in. No tracking cookies, no analytics cookies.

Contact

Privacy questions: hello@tomhay.es