Privacy Policy

1. Information We Collect

Information You Provide

• Email address — Collected during the purchase process through our payment provider, Paddle. Used to deliver your license key and important account communications.

Information Collected Automatically

• License data — License key, subscription tier, and subscription status, stored on our servers for license validation.
• Device information — When you activate your license, we collect a machine fingerprint (a hashed identifier of your device) and an optional device name. This is used solely to enforce the device limit included in your subscription plan.
• Analytics data — We use Cloudflare Web Analytics to collect anonymous, aggregated website usage data. This service does not use cookies and does not collect personal information.

Information We Do NOT Collect

• Game data — All your Go games, SGF files, analysis results, and game library data are stored locally on your device. We do not have access to this data.
• Payment details — Credit card numbers and billing details are handled entirely by Paddle. We never see or store your payment information.

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain the StoneBase application and license system
• Deliver license keys and account-related communications
• Validate your subscription and manage device activations
• Improve our website and services through anonymous analytics
• Respond to support requests

3. Payment Processing

All payments are processed by Paddle.com Market Limited ("Paddle"), which acts as our Merchant of Record. When you make a purchase, you are transacting directly with Paddle. Paddle handles checkout, payment processing, invoicing, sales tax, and VAT compliance.

Paddle's privacy policy applies to all payment-related data: paddle.com/legal/privacy

4. Third-Party Services

We use the following third-party services:

• Paddle — Payment processing and subscription management. Data shared: email and billing information (handled directly by Paddle).
• Cloudflare — Website hosting and anonymous web analytics. Data shared: anonymous usage data (no personal information, no cookies).
• Resend — Transactional email delivery (license keys). Data shared: email address.

5. Data Storage and Security

• License and device activation data is stored on Cloudflare D1, a serverless database hosted within the European Union.
• We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.
• All communications between your device and our servers are encrypted using TLS.

6. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

• Access — Request a copy of the personal data we hold about you.
• Rectification — Request correction of inaccurate personal data.
• Erasure — Request deletion of your personal data.
• Restriction — Request restriction of processing of your personal data.
• Portability — Request transfer of your personal data in a structured, machine-readable format.
• Objection — Object to the processing of your personal data.

To exercise any of these rights, contact us at contact@gostonebase.com. We will respond within 30 days.

7. Data Retention

• License data — Retained for the duration of your subscription and for up to 12 months after cancellation for record-keeping purposes.
• Device activations — Removed when you deactivate a device or when your license expires.
• Email address — Retained for the duration of your subscription and deleted upon request after cancellation.

8. Children's Privacy

StoneBase is not directed at children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us and we will promptly delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of StoneBase after changes are posted constitutes acceptance of the revised policy.

10. Contact

If you have questions about this Privacy Policy or wish to exercise your data protection rights, contact us at:

contact@gostonebase.com