Privacy policy.

What we collect

• Your name and email address when you create an account.
• Purchase records (what you bought, when, the last four digits of the card) held by SureCart and Stripe. We never see your full card number.
• Your licence and download history, so we can support you.
• Your email address when you sign up for updates. We send a confirmation email first, and nothing more until you confirm.
• Your first name, email address and the name you use in the Etch Circle when you register for the members' code. We use the Circle name only to check membership, and the email only to send your code.
• When you use the library panel in the EtchPress Runtime plugin, your site sends your licence key and its activation id with each insert. We check them with SureCart and keep an hourly count per key to stop misuse. Nothing about your pages or your visitors is sent. The EtchPress MCP on your computer does the same for each insert, under one activation on your licence named after your computer; remove it like a site's. Share with a link keeps its key on your own site, never here.
• Server logs (IP address, browser, pages requested) kept for security for a short period.

What we do not do

• No advertising trackers, no selling or sharing your data with advertisers.
• No marketing email unless you asked for it. Product and licence emails are the only ones you get by default, and every news email has an unsubscribe link. Account, receipt and security emails do not.

Cookies and local storage

A login cookie keeps you signed in. Your light or dark choice and the class prefix you copy with are stored in your browser, not on our servers.

Your rights

Email hello@etchpress.com to see, correct, export or delete your data. Deleting your account removes your personal data; purchase records stay with the payment processor for as long as the law requires.

Forms and bot protection

The contact, suggestion, updates and Etch Circle forms are protected by Cloudflare Turnstile, which checks that a submission comes from a person without showing a puzzle. To do that it processes a few technical signals from your browser (your IP address, browser details and the page you are on) and nothing you type into the form. Cloudflare's Turnstile Privacy Addendum describes exactly what it collects and why. What you type into a form goes to us and the processors listed below, nowhere else.

Processors

SureCart and Stripe (payments), ServerAvatar-managed hosting (the site), Postmark (transactional email), SureContact (our contact list and update emails), Cloudflare (bot protection on the forms). Each has its own privacy policy.