Privacy Policy

This policy explains what personal information OwlAttic, LLC (“OwlAttic”, “we”) collects, why, and what you can do about it. It covers our website, owlattic.com, our emails with you, and our apps, starting with OwlAttic Terminal.

The short version: we collect as little as we can. The website has no advertising, no tracking cookies and no third-party trackers. OwlAttic Terminal keeps your servers, passwords and keys on your own computer.

Who we are

OwlAttic, LLC is a limited liability company registered in Delaware, United States. We decide how the information described here is used (in European terms, we are the controller).

• Email: owl@owlattic.com
• Mail: OwlAttic, LLC, 2810 N Church St STE 90059, Wilmington, DE 19802, United States

When you visit the website

The website is a set of static pages served by Cloudflare, which hosts it for us. To deliver the pages and protect the site from attacks and abuse, Cloudflare processes the technical details of each request: your IP address, browser and device type, the page you asked for, the page you came from, and the time. We use these records only to run and secure the site.

To count visits, we use Cloudflare Web Analytics. It does not use cookies, does not build a profile of you, and gives us totals only: how many people visited which pages, from which countries and which websites.

You can read Cloudflare’s own policy at cloudflare.com/privacypolicy.

Cookies

The website sets no cookies, and we do not use cookies for analytics or advertising. Cloudflare, which hosts the site, may set a security cookie, cf_clearance, only if it needs to show a visitor a security check, for example while the site is under attack. That cookie does not identify you or follow you to other websites, and because it is strictly necessary, the site does not ask for your consent to cookies. The Cookie Policy explains more.

When you write to us

If you email us, we receive your email address, your name if you include it, and whatever you write. We use it to answer you and to keep a record of our conversation. Our email passes through Cloudflare’s email routing and our email provider.

If you ask us to tell you when OwlAttic Terminal is available, we keep your address for that purpose only: we send the notice, and you can ask us to remove your address at any time.

We keep correspondence for as long as we need it to help you, and afterwards only as long as business records require.

OwlAttic Terminal

OwlAttic Terminal is available for Windows. This is how it handles your data:

• The servers you save, your settings, and the passwords and private keys in its vault stay on your computer. The vault is encrypted with your master password, which we never receive.
• The app does not collect usage statistics.
• If the app crashes, it writes a report on your computer. The report contains no memory contents, and it reaches us only if you choose to send it.

The free edition never sends anything to us. Pro licenses are described below. Before the app sends us anything else, for example to check for updates or to sync your data, we will update this policy and explain it in the app. Planned cloud sync will be end-to-end encrypted, so we will not be able to read what you sync.

Purchases and licenses

Paid editions of our apps are not on sale yet. This is how it will work once they are.

Paying. Checkout takes place on Stripe’s pages, and Stripe processes your payment under its own privacy policy. From Stripe we receive your name, email address, billing country and postal code, what you bought, and whether the payment went through. We never receive your full card number. We use this to send you your license key, help you, give refunds, and keep the records that tax law requires.

Activating a Pro license. When you activate a Pro license on a computer, the app sends our license server your license key, a device identifier that the app generates, the app version and your operating system; like every connection, the request also carries your IP address. We use this only to check the license, apply its device limit and prevent misuse. The app repeats this check from time to time.

We keep purchase and license records for as long as your license exists, and afterwards only as long as tax and business records require.

Why we may use your information

If you are in the European Economic Area, the United Kingdom or another place with similar laws, these are our legal bases:

• Running and securing the website, and answering your messages: our legitimate interest in operating a working, safe website and replying to people who contact us.
• Selling you a license, delivering it, checking its activations and giving refunds: performing our contract with you.
• Notifying you when an app is available: your consent, which you can withdraw at any time.
• Keeping records required by law: our legal obligations.

We do not sell your personal information, share it for advertising, or use it to make automated decisions about you.

Where your information is processed

We are based in the United States, and Cloudflare, Stripe and our email provider process information in the United States and other countries. Where the law requires it, these transfers are covered by appropriate safeguards, such as the European Commission’s standard contractual clauses.

Your rights

You can ask us to:

• tell you what personal information we hold about you and give you a copy;
• correct it;
• delete it;
• stop using it, or use it only in limited ways;
• send it to you or to another company in a common format.

Write to owl@owlattic.com. We will answer within 30 days. We may ask you to confirm who you are before we act on a request. You will not be treated differently for using these rights.

If you are in the European Economic Area or the United Kingdom, you can also complain to your data protection authority. If you live in California or another US state with a privacy law, you have the rights that law gives you; as stated above, we do not sell or share personal information.

Do Not Track and Global Privacy Control

Some browsers send a “Do Not Track” or Global Privacy Control signal. We do not sell personal information or share it for advertising, so these signals do not change anything we do. Where the law requires us to treat such a signal as a request, we will.

Children

Our website and apps are made for adults who work with computers. We do not knowingly collect personal information from children under 16. If you believe a child has sent us personal information, write to us and we will delete it.

Changes to this policy

When we change this policy, we will publish the new version here and update the date at the top. We will not start using information we already hold in a new way without telling you first.