Privacy Notice

1. What we collect

We collect the minimum needed to run a paid, license-key service:

• Purchase and order data — shared with us by Paddle after a completed, cancelled or refunded transaction. This can include your email address, a Paddle customer ID, transaction ID, currency and amount, the plan you bought, and the webhook payload Paddle sends (kept for audit so redeliveries never double-count).
• License data — the license key issued to you, your plan, status, paid-period end date, and, if you use the Paddle customer portal, the manage/cancel link that portal returns.
• Recovery inputs — if you use our license recovery page, the email (and optionally transaction ID) you enter, used only to verify that you are the customer before we show you a key.

We do not see, store or process your card details. Cards are handled entirely by Paddle. We do not use advertising trackers, fingerprinting or third-party analytics.

2. Why we process it and our legal bases

• To provide the Service and grant your license (performance of our contract with you) — issuing and maintaining your key, showing it after checkout, and powering recovery.
• To take money in / respect cancellations and refunds (contract performance, and our legitimate interest in running a correct billing lifecycle) — reflecting cancellations and refunds in your license status.
• To comply with law and keep records (legal obligation / legitimate interest) — order records needed for tax, accounting and anti-fraud obligations.
• To keep the site secure and prevent abuse (legitimate interest) — for example, rate-limiting repeated requests against our endpoints.

3. Who we share data with

• Paddle — the payment processor and merchant of record. Paddle shares order data with us to let us deliver licenses, and processes card data under its own privacy terms.
• Cloudflare, Inc. — we host the Service on Cloudflare Workers and store data in Cloudflare D1 and R2. Cloudflare processes data as our processor/infrastructure provider under its own terms, including standard contractual protections for international transfers.

We never sell personal data. We only disclose it where required by law, to our professional advisers, or to the providers above.

4. How long we keep it

Order and transaction records are kept as long as needed for accounting, tax and fraud-prevention purposes (typically the periods required by law). License records are kept while your subscription is active and for a reasonable period afterwards so we can honour cancellations, refunds and recovery. When data is no longer needed, we delete it.

5. Your rights

Depending on where you live (for example under the GDPR, the UK GDPR or the CCPA), you may have the right to:

• access the personal data we hold about you,
• ask us to correct or delete it,
• restrict or object to certain processing,
• ask for a copy in a portable format, and
• withdraw any consent you gave (where we rely on consent).

To exercise any of these, email support@pennyinny.party. We will respond within the time required by applicable law. You can also lodge a complaint with your local data protection authority (in the UK, the Information Commissioner's Office).

6. Security

We store order and license data in Cloudflare D1 with content-type safeguards on responses, verify Paddle webhooks by signature, rate-limit public endpoints, and keep back-office actions behind a bearer token. No system is perfectly secure, but we apply reasonable technical and organisational measures.

7. Children

The Service is not directed at children under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

8. Changes to this notice

We may update this notice as the Service evolves. The latest version is always on this page and the date above shows when it last changed.

9. Contact

Privacy questions, rights requests and complaints: support@pennyinny.party.