Privacy Policy

1. Who we are

yowio is the data controller for this website and the licensing backend. To exercise your rights or ask privacy questions, contact support.

2. What we collect and why

• Account data (username, email, password hash): to operate your account. Basis: contract.
• Hardware fingerprint (hashed identifiers + encrypted raw values): to enforce one-seat licenses and prevent account sharing. Basis: contract. Raw values are encrypted; hashes cannot be reversed into your hardware.
• Subscription data (plan, expiry): to gate access. Basis: contract.
• Security logs (login attempts, HWID checks, redemptions, downloads): to detect abuse and fraud. Each entry stores the IP address plus coarse network intel (country/city, ISP, whether it belongs to a VPN/hosting range). Basis: legitimate interest, kept 12 months max.
• Payment data: processed by Stripe — card numbers never touch our servers. See Stripe's privacy policy.

3. Who processes it

Supabase (database/auth hosting, EU region), Stripe (payments), Cloudflare (bot protection and delivery). No data is sold or shared for marketing, ever.

4. Your rights (GDPR)

Access, rectification, erasure, portability, restriction and objection: contact support to exercise any of them. Deleting your account removes personal data; anonymized security logs may be retained for fraud prevention.

5. Cookies

Only a strictly-necessary session cookie for login. No tracking, no ads, no analytics.