Privacy Policy

DRAFT — NOT LEGAL ADVICE. Tim must review (ideally with a lawyer) before launch. Fill in every [BRACKETED] item. Written for a static, browser-only tool that sells one-time licenses via Stripe and stores only purchase email + license data.

Effective date: [DATE] · Operator: [TIM'S LEGAL NAME or BUSINESS NAME], [MAILING ADDRESS] (“Inkfoot”, “we”) · Contact: [SUPPORT EMAIL]

1. Summary

2. Information we process

a) Signature details (not collected). Stored only in your browser's local storage so you can return and edit. Clear it any time by clearing site data.

b) Purchase data. Payments are handled by Stripe, Inc. We receive from Stripe: your email address, the plan purchased, amount, currency, country, and payment/transaction identifiers. We never receive or store your full card number. We store: email, license key, plan, seat count, Stripe session and payment-intent IDs, purchase date, refund/revocation status, and whether the key email was delivered.

c) License activation. When you activate a key, your browser sends the key to our license server. Our hosting provider may process your IP address and request metadata transiently for security and abuse prevention; we do not keep activation logs tied to you beyond [N] days. [CONFIRM]

d) Support email. If you email us, we keep the correspondence to help you.

e) Analytics. [None at launch. If added: name the tool, e.g. cookieless Cloudflare Web Analytics, and what it collects.]

3. Why we use it (legal bases for EEA/UK users)

4. Service providers (processors)

These providers may process data in the United States and other countries. [Confirm transfer mechanisms, e.g. providers' Standard Contractual Clauses / Data Privacy Framework.]

5. Retention

License and purchase records: for as long as the license exists plus the period required for tax records ([e.g. 7 years]). Support emails: [e.g. 2 years]. Browser data: until you clear it.

6. Your rights

Depending on where you live (e.g. GDPR/UK GDPR, California CCPA/CPRA), you may request access, correction, deletion, or a copy of your data, and object to or restrict processing. Email [SUPPORT EMAIL]; we'll respond within 30 days. Deleting purchase data may mean we can no longer verify your license. You may also complain to your local data-protection authority. We do not “sell” or “share” personal information as defined by California law.

7. Cookies and local storage

We don't set advertising or tracking cookies. The generator uses browser local storage for your signature details and license status (strictly necessary for the feature). Stripe sets its own cookies on its checkout pages.

7a. Affiliate links and advertising

Clicking a recommendation link takes you to a third-party site, which may set its own cookies to attribute the referral to us; their privacy policies apply. We do not share your signature details with them. [Only if AdSense is enabled:] Google and its partners use cookies to serve ads based on prior visits to this and other sites; you can opt out of personalised ads at adssettings.google.com. Visitors in the EEA, UK and Switzerland are asked for consent via a Google-certified consent platform before such cookies are used.

8. Children

Inkfoot is not directed to children under 13 (or 16 in the EEA), and we don't knowingly collect their data.

9. Security

Data is transmitted over HTTPS; payment data stays with Stripe; access to license records is restricted to the operator.

10. Changes

We'll post updates here with a new effective date and, for material changes, email license holders.