Privacy Policy

The short version

We collect your email address so we can attach it to your order, plus anonymous usage statistics. We do not log your IP address, we do not store your browser's user agent, and we never see your card details.

What we store about an order

• the email address you type at checkout
• what you bought, the price, the currency and the payment method
• the licence keys issued to you, so we can show them again from your receipt link
• a reference number and the time of the order

Your receipt link contains a long random token. Anyone holding that link can see the order and its keys, so treat it like the keys themselves.

Payment data

Card payments are taken on Stripe's own checkout page and crypto payments on OxaPay's. Your card number, CVC and wallet details are entered there, never here, and never reach our servers. Each provider handles that data under its own privacy policy.

Analytics

We count page views and product views so we know what is worth stocking. Each event records only: the type of event, a random visitor id, a random session id, the page path, the product involved, the host part of the referring site, and whether the device is a phone, tablet or desktop.

Deliberately absent: your IP address, your user agent, and any full referring URL. The visitor and session ids are random values generated in your browser and are not linked to your email or your orders.

Browser storage

We use your browser’s own storage rather than tracking cookies. The values kept are:

• keys.ac:currency - the currency you chose to browse in
• keys.ac:email - your email, so you do not retype it each purchase
• keys.ac:method - the payment method you used last
• keys.ac:visitor - a random id for counting return visits
• keys.ac:session - a random id for the current tab session, cleared when it closes
• keys.ac:banners-dismissed - which notices you have closed

Clearing your site data removes all of them. Nothing here identifies you to anyone else, and none of it is shared with advertisers, because we do not run any.

Who else sees your data

• Stripe and OxaPay, for the payment you chose
• our hosting and database provider, which stores the data at rest

We do not sell your data. We do not share it for advertising.

Keeping and deleting

Orders are kept as long as we need them for accounting and support. Analytics events are pruned periodically. You can ask us to delete your order history by writing to [email protected] from the address you ordered with, and we will, except where we must keep a record of the sale.