Privacy Policy

We collect only what we need to take and deliver your order:

• Your email address and billing country, which you enter at checkout
• Your order history: the items, price, date and order number
• The license keys we deliver to you (stored encrypted)
• If you contact us: your name, email address, order number (optional) and your message
• If you leave a review: your review and the display name you choose (by default, your first name and last initial)

We do not collect or store your payment information (e.g., credit card details). Payments are processed by Stripe (cards, Apple Pay, Google Pay and Link) and PayPal. They receive your payment details under their own privacy policies, and send us only the result of the payment.

Please note that after you activate any software licenses purchased from us, the software creators may collect additional data from you. This data collection is not covered by our privacy policy and is governed by the respective software creators' policies.

We use the personal information we collect for the following purposes:

• Processing orders and delivering software licenses
• Providing customer support
• Marketing and promotional communications (if you opt-in)
• Website analytics and improvement
• Preventing fraud, spam and abuse (for example bot checks and rate limits)
• Compliance with legal obligations

Order emails. We email you your order confirmation, license keys, delivery and refund updates, and one request to review your purchase. These emails are part of running your order, and are sent through Resend.

Newsletter. At checkout you can opt in to news and offers. The box is pre-ticked, except if your billing country is in the EU, EEA, United Kingdom or Switzerland, where it is not. You can also subscribe with the form in our site footer. Subscribers are kept in a Resend mailing list. Every newsletter has a one-click unsubscribe link. Unsubscribing never stops your order emails.

We may share your personal information with third parties in the following limited circumstances:

• With the service providers that help us run the store, listed below
• As required by law, such as to comply with a subpoena, court order, or similar legal process
• To protect our rights, property, or safety, or that of our users or others

Our service providers are:

• Stripe and PayPal: payment processing
• Resend: order emails, messages sent through our contact form, and the newsletter list
• PostHog: website analytics (see Cookies and Analytics below)
• Cloudflare: network and DDoS protection for the whole site, and the Turnstile bot check on checkout and forms
• Oracle Cloud: hosting of the site and its database, on a server in Singapore
• Backblaze B2: storage of our nightly backups

We do not sell, trade, or rent your personal information to third parties for marketing purposes.

We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include encryption, firewalls, and access controls. However, no method of transmission over the internet or electronic storage is 100% secure, so we cannot guarantee absolute security.

Analytics. We measure traffic with PostHog in cookieless mode. It stores nothing in your browser: no cookie, local storage or session storage. To count unique visitors per day, PostHog builds an anonymous code from your IP address, browser type and our site name. That code changes every day, so we cannot follow you from one day to the next. Analytics requests go through our own domain. Private order links are cleaned of their tokens before anything is recorded. When an order is completed, delivered or refunded, our server also records that event, without your email address. We do not use Google Analytics, Microsoft Clarity or advertising trackers.

Cookies we set. We set only the cookies the store needs: a random ID that helps keep pages fast (24 hours) and a cart cookie that remembers your basket (up to 7 days). We also keep one small flag in your browser session so the home page animation plays once per visit. Because we set no analytics or advertising cookies, there is no cookie banner.

Third-party cookies. Stripe, PayPal and Cloudflare load their own scripts at checkout and on forms, and may set their own cookies or storage for payment and security. You can control cookies through your browser settings.

Our website and services are not intended for children under the age of 13. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child, we will take steps to delete that information.

Under certain privacy laws, such as the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), you may have the following rights regarding your personal information:

• Access and review your information
• Request corrections or updates to your information
• Request deletion of your information (subject to legal requirements)
• Opt-out of marketing communications
• Object to or restrict certain processing of your information
• Request data portability (to receive a copy of your information in a structured, commonly used, and machine-readable format)

To exercise these rights, please contact us at the information provided below.

We may update this privacy policy from time to time. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date at the top of this policy. We encourage you to review this policy periodically for any updates.

If you have any questions or concerns about this privacy policy or our data practices, please contact us at:

• Appicker.com
• Attn: Privacy Officer
• support@appicker.com