Privacy policy

Last updated: [date]

What we collect

• Account: your email address and a password (stored hashed by our authentication provider).
• Purchases: what you bought, when, the amount, and the payment provider’s reference. The email address of the PayPal account you paid with, which we use only to prevent referral fraud. We never see or store card or wallet credentials; PayPal handles payment details.
• License checks from the app: a hardware fingerprint (a one-way hash, not your serial numbers), the PC name you choose to show, the app version, IP address, and when the app last checked in. This is how the key is locked to one PC.
• Creator links: a salted hash of the visitor’s IP address and browser, to count unique visits.

The app doesn’t collect your files, browsing, game data or keystrokes.

Why

To provide the software and your account, take payments, prevent key sharing and fraud, pay creators, and answer support requests. The legal basis is performing our contract with you and our legitimate interest in preventing fraud.

Who we share it with

Only the services that run Tweaker: Supabase (database and sign-in), [Vercel] (website hosting), PayPal (payments and creator payouts), and [Resend] (email). We don’t sell personal data or use advertising trackers.

How long we keep it

Account data while your account exists. Payment records for as long as tax law requires (typically [6–10] years). License check-in logs for [12] months.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, or object to how we use it, by writing to rootmeerkat@gmail.com. You can also complain to your data protection authority.

Contact

[Business name], [address], rootmeerkat@gmail.com.