Legal

Privacy

TODO(owner): finalize with counsel. The statements below describe what this site actually does today, as built — they are the factual basis for the final policy.

What this site collects, factually

No analytics or tracking scripts. The site sets no cookies for tracking and loads no third-party scripts.
Checkout: your email and chosen edition are sent to the payment provider (Stripe or Razorpay) to create the payment; the providers' own privacy policies apply to the payment itself.
Orders: after payment we store your email, order id, edition, amount and license key — the minimum to honor the license, updates and support.
License keys contain a SHA-256 hash of your email, never the address itself.
Downloads: signed links contain your order id and an expiry; standard web-server logs may record requests.
The product does not phone home — deployments of purchased source send nothing to us.

To be decided by the owner

Data-retention period for orders (tax law usually sets a floor). TODO
Data-subject request contact + process (GDPR/analogous). TODO
Hosting jurisdiction disclosure. TODO