Privacy Policy

1. Information We Collect

Information You Provide

• Email address — Collected during the purchase process through our payment provider, Paddle. Used to deliver your license key and important account communications.

Information Collected Automatically

• License data — License key, subscription tier, and subscription status, stored on our servers for license validation.
• Device information — When you activate your license, we collect a machine fingerprint (a hashed identifier of your device) and an optional device name. This is used to enforce the device limit included in your subscription plan. During keyless open beta access, the app sends only the hashed machine fingerprint to obtain a signed, device-bound access token valid for at most 48 hours. This creates no account, license record or device activation. The token is cached locally and renewed periodically; access validation runs independently of the optional telemetry preference.
• Analytics data — We use Cloudflare Web Analytics to collect anonymous, aggregated website usage data. This service does not use cookies and does not collect personal information.

Optional App Telemetry

StoneBase app usage and reliability statistics are off by default and sent only when enabled in Settings → Privacy. You may withdraw consent there at any time. The setting applies to the server installation and its connected browsers. Telemetry includes a pseudonymous installation ID, random session and operation IDs, app version, operating system, locale, country, browser family and broad viewport category; fixed feature and error codes; operation outcomes, durations and counts; and engine or subscription categories where available. The installation ID allows usage to be linked across sessions and is not a guarantee of anonymity.

We use these events to identify failures and improve the app. Heartbeats are sent every 30 minutes while the server runs. We do not include names, license keys, game contents, raw IP addresses, file paths, full URLs, engine commands, error messages or stack traces in automatic telemetry. Diagnostic fingerprints group errors without sending their messages. Cloudflare handles the connecting IP for network delivery and security; we do not store it in our Analytics Engine datasets.

Delivery uses bounded in-memory queues and limited retries. Disabling telemetry clears pending events and stops future collection; already received events are not recalled. Error reports shown for you to review and copy can contain private details. Copying a report does not send it to us; review it before choosing to share it.

Information We Do NOT Collect

• Game data — Your Go games, SGF files, analysis results, and library are stored on the computer running your StoneBase server. Phones and tablets you connect communicate with that server. We do not have access to this data.
• Payment details — Credit card numbers and billing details are handled entirely by Paddle. We never see or store your payment information.

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain the StoneBase application and license system
• Deliver license keys and account-related communications
• Validate your subscription and manage device activations
• Improve our website and services through website analytics and optional pseudonymous app telemetry
• Respond to support requests

3. Payment Processing

All payments are processed by Paddle.com Market Limited ("Paddle"), which acts as our Merchant of Record. When you make a purchase, you are transacting directly with Paddle. Paddle handles checkout, payment processing, invoicing, sales tax, and VAT compliance.

Paddle's privacy policy applies to all payment-related data: paddle.com/legal/privacy

4. Third-Party Services

We use the following third-party services:

• Paddle — Payment processing and subscription management. Data shared: email and billing information (handled directly by Paddle).
• Cloudflare — Website hosting, cookie-free web analytics, and optional app telemetry stored in Workers Analytics Engine. App telemetry contains pseudonymous identifiers and the restricted fields described above.
• Resend — Transactional email delivery (license keys). Data shared: email address.

5. Data Storage and Security

• License and device activation data is stored on Cloudflare D1, a serverless database hosted within the European Union.
• We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.
• All communications between your device and our servers are encrypted using TLS.

6. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

• Access — Request a copy of the personal data we hold about you.
• Rectification — Request correction of inaccurate personal data.
• Erasure — Request deletion of your personal data.
• Restriction — Request restriction of processing of your personal data.
• Portability — Request transfer of your personal data in a structured, machine-readable format.
• Objection — Object to the processing of your personal data.

To exercise any of these rights, contact us at contact@gostonebase.com. We will respond within 30 days.

7. Data Retention

• Optional app telemetry — Stored in Cloudflare Workers Analytics Engine for three months.
• License data — Retained for the duration of your subscription and for up to 12 months after cancellation for record-keeping purposes.
• Device activations — Removed when you deactivate a device or when your license expires.
• Email address — Retained for the duration of your subscription and deleted upon request after cancellation.

8. Children's Privacy

StoneBase is not directed at children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us and we will promptly delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of StoneBase after changes are posted constitutes acceptance of the revised policy.

10. Contact

If you have questions about this Privacy Policy or wish to exercise your data protection rights, contact us at:

contact@gostonebase.com