Privacy

What we hold

Your e-mail address, what you bought, what it cost, when, and the reference for the order. That is what a receipt has to contain and it is what we keep.

We do not hold your card number. The card form on the payment page belongs to Stripe and what you type into it goes straight to Stripe; it never passes through Keyhalt. Stripe tells us whether the payment succeeded and nothing more than the last four digits and the card brand.

Why we hold it

• To send you the licence key you paid for, and to send it again if you ask.
• To answer questions about a charge, and to handle refunds and disputes.
• To keep the accounting records the law requires.

Who else sees it

Stripe, who take the payment and hold their own record of it under their own privacy policy; the e-mail provider that delivers your key; and the hosting provider that runs the servers. Nobody else. We do not sell anything about you and we do not run advertising.

Cookies and tracking

Keyhalt sets no cookies of its own and runs no analytics. The payment page keeps one value in your browser's session storage — the identifier of the payment you started — so that a declined card can be retried without opening a second payment. It is gone when you close the tab. Stripe's payment form sets its own cookies, which it needs to detect fraud.

Your choice of light or dark theme is stored in your browser and never sent anywhere.

How long

Order records are kept for as long as the law requires accounting records to be kept, and then deleted. Nothing else is kept beyond that.

Your rights

You can ask what we hold about you, ask for it to be corrected, or ask for it to be deleted where the law does not require us to keep it. Write to [email protected] from the address you used at checkout, or quote the order reference, so we can be sure it is you.

The same facts, in plain language

The Security page says all of this again without the legal register, and adds how the payment link and the card form work.