Privacy
The Pinemoon Studios operator is responsible for processing your data and uses it to activate TigerDC++, protect the service and respond to support requests. We do not sell this data or use it for advertising.
What the server receives
| Data | Purpose and retention |
|---|---|
| License and device | Your key is checked with Lemon Squeezy. The registry stores a key hash, license and order IDs, a hash of the device's public key and authorization dates for as long as needed to service the license. The license key is kept in your Mac's Keychain; the device's private key stays on your Mac. |
| Free trial | When you start a trial, your Mac hashes a hardware identifier. The server stores a second hash, a hash of the device key and fixed start and end dates. The original hardware identifier is not sent. The record is retained to limit trials to one per Mac; reinstalling does not start a new period. |
| Technical requests | Cloudflare and other network providers process your IP address and connection details. Our rate limits use hashes of addresses and devices. Rate windows last up to an hour and replay protection lasts about 11 minutes; expired records are removed by later requests. Request-body logging and license-server tracing are disabled. |
| Payment | Lemon Squeezy processes your purchase and tax details. Our server does not receive your card number. Payment records are retained according to the provider's obligations and applicable law. |
| Support | GitHub reports are public and remain in project history. You choose what to send. The app can prepare its version, macOS version and Mac architecture; files and logs are not attached automatically. Send purchase details through the private support form. |
The private form stores your message, optional reply email and any app version, macOS version and architecture you choose to send. Tickets are deleted after 90 days without an update. Cloudflare hosts the form and its database, with the database restricted to the EU. Turnstile checks submissions for spam. A temporary HMAC-based code limits repeat submissions; it is deleted within two days. Your IP address is not saved with the ticket. Cloudflare processes network data separately to operate and protect its services.
What stays with you
The license server does not receive your queue, downloaded file names, chats or shared-folder contents. The website has no advertising trackers, analytics or external fonts.
When using Direct Connect, your chosen hubs and other participants receive protocol data, including your nickname, network address and published file information. Only folders you choose are shared.
Providers and your rights
Cloudflare hosts the license server and Neon stores its registry. Lemon Squeezy handles purchases and GitHub hosts public bug reports. See their privacy information: Cloudflare, Neon, Lemon Squeezy and GitHub. Their infrastructure may be outside your country.
Activation and support data are processed to fulfil the contract. Preventing repeated trials and abuse relies on our legitimate interest in service security. Mandatory payment records are retained to meet legal obligations. Hashes are pseudonymous data, not guaranteed anonymity.
You can request access, correction or deletion, restrict or object to processing and exercise other applicable rights. For a private request, use the support form, even if you have not made a purchase. Deleting data needed for activation may stop license verification. You can also contact the competent data protection authority.