What we hold
Your email address, the billing details you enter at checkout, your order and licence history, your invoices, and any messages you send us through support.
If you create an account we hold your sign-in details; passwords are stored hashed by our authentication service and cannot be read by us or by anyone else.
We do not buy personal data, and we do not build profiles of you beyond your own orders and conversations with us.
Card details
We never receive your card number or security code. Card fields at checkout are hosted by PayPal inside their own frames; the values are not readable by this website by construction, and there is an automated check in our codebase that fails the build if anyone adds a card field of our own beside them.
What we do receive from PayPal is a record of the payment: the amount, the currency, the provider's own reference, whether it succeeded, and the fee. That is what we reconcile and account for.
PayPal handles your payment under their own privacy terms, as the party that actually processes it.
Your licences
Licence keys are encrypted before they are stored and are decrypted only at the moment they are shown to you.
We record when a key is first revealed, when it was last revealed and how many times, together with its allocation and replacement history. That record is what lets us investigate a fault, prove a replacement was issued, and detect abuse.
Getting to your order
Signed-in customers reach orders through their account. Guests reach a single order through a private link, which is time-limited and only ever opens that one order.
We store only a keyed fingerprint of that link, never the link itself, so the contents of our database cannot be used to open anybody's order.
Support conversations
Support cases, the messages in them and any files you attach are kept so we can help you and so there is a record of what was agreed. An automated assistant may answer first; a person can take over the same conversation at any time.
The assistant answers from this store's own records and published policies. It cannot issue refunds, reveal or issue licences, or change your account — those are done by a person.
Email we send you
We send email that is part of the service: confirming an order, confirming a payment, telling you a licence is ready, telling you a licence could not be allocated, confirming a replacement or a refund, replying to a support case, verifying an address and helping you recover a password.
These are not marketing messages and there is no unsubscribe from them, because they are how the thing you bought is delivered. We do not currently run a marketing mailing list.
Emails never contain a licence key. They link you to your order, where you reveal it.
Cookies and similar storage
Some storage is necessary for the site to work at all — keeping you signed in, remembering your basket and recording your privacy choice. It is always on, because without it the store does not function.
Everything else is off until you choose. Nothing for analytics or advertising loads or transmits before you make a choice on the privacy banner.
Analytics
If you allow analytics, we use Google Analytics 4 to understand which pages and products people use, so we can improve them. It is not loaded at all if you do not allow it.
Advertising
If you allow advertising, we use Google Ads to measure which adverts lead to a purchase.
Where that measurement includes your email address, the address is hashed with SHA-256 in your browser before it is sent. The plain address is never transmitted to an advertising tag.
Your choice is passed to Google as a consent signal covering analytics storage, advertising storage, advertising user data and advertising personalisation, so the tags behave according to what you allowed.
Changing your mind
Use the cookie preferences link in the footer to change your choice at any time. Withdrawing consent stops the relevant tags from loading on your next page view.
Security and fraud records
We keep records of administrative actions, licence lifecycle events, sign-in events and the activity of any connected tools. These exist to protect your order and your licences and to investigate abuse.
Records we keep for accounting
Orders, payments, refunds, replacements and invoices are kept because tax and accounting rules require a business to keep them. Those records are not deleted on request while that obligation applies.
Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete data we are not legally required to keep. Ask through the help page and a person will handle it.
If you want your account closed, tell us; your accounting records remain for as long as the law requires, and the rest is removed.
Questions about this page? Talk to our support team.