Privacy Policy

The short version

We collect your email address, the license keys we issue you, and the hostnames of the sites you activate them on. We use no analytics, no tracking pixels and no advertising. We never see your card details. The only cookie we set is the one that keeps you signed in.

Who is responsible

Ptova LLC, Pleasant Grove, Utah, United States, is the controller of this data. Contact us at hello@ptova.com.

What we collect

• Your email address — given at checkout and used to sign in. It is how we identify your account and where we send your license key.
• License records — the key we issue, which product it is for, how many sites it covers, whether it is active, and when it was created and expires.
• Activations — the hostname of each site where you activate a key, and when. We need this to enforce the site limit on your plan.
• A Stripe customer identifier — so your purchases, renewals and invoices stay linked to one account.

We do not ask for your name, your postal address, or anything about your site's visitors, and our software does not send us your site's content or customer data.

Payment data

Payments are processed by Stripe. Card numbers are entered directly into Stripe's own payment form and never reach our servers — we receive only a customer identifier and whether the payment succeeded. Stripe may collect billing details, including address, where it needs them for payment or tax purposes. Stripe's handling of that data is covered by Stripe's privacy policy.

Cookies

We set exactly one cookie, ptova_session. It is created when you sign in, lasts 7 days, and exists solely to keep you signed in. It is HttpOnly, Secure and SameSite=Lax, and it holds only your email address and an expiry time, signed so it cannot be tampered with.

Because it is strictly necessary for a service you asked for, it does not require consent — which is why this site has no cookie banner. We set no analytics, advertising or tracking cookies of any kind.

Our checkout page loads Stripe's payment form, and Stripe sets its own cookies there for fraud prevention and to make the form work. That is the only third-party code on this site, and it appears on no other page.

Signing in

We do not use passwords. When you request a sign-in link, we email a single-use token that expires after 15 minutes. We store only a cryptographic hash of that token, never the token itself, and we delete it the moment it is used. Requests are rate-limited to one per minute per address.

How we use it

• To deliver your license key and let you sign in to your account.
• To enforce the number of sites your plan covers.
• To deliver software updates and downloads to licensed sites.
• To answer your support requests.
• To meet our tax, accounting and legal obligations.

We do not sell your data, share it for advertising, or use it to build a profile of you.

Who else processes it

• Stripe — payments, subscriptions and invoices.
• Cloudflare — hosting, and delivery of our email. As part of serving this site, Cloudflare processes request data including IP addresses.

We use these because we need them to run the service. We do not pass your data to anyone else unless the law requires it.

Where it is held

Our data is stored on Cloudflare's infrastructure and may be processed in the United States and other countries where Cloudflare and Stripe operate.

How long we keep it

We keep license and activation records for as long as the license exists, and afterwards for as long as we need them for tax and accounting purposes. Sign-in tokens are deleted on use or within 15 minutes. Session cookies expire after 7 days.

Your rights

You can ask us to show you what we hold about you, correct it, or delete it. Email hello@ptova.com and we will respond within 30 days. Depending on where you live you may have additional rights, including the right to complain to a data-protection authority.

One practical note: your email address is the link to your licenses. Deleting it ends your ability to sign in, download, or receive updates, and we may be unable to restore it. We will always say so before acting on a deletion request.

Children

Our products are sold to businesses and site owners and are not directed at children. We do not knowingly collect data from anyone under 13.

Changes

If we change this policy we will update the date above, and tell you by email if the change is material.

Contact

Privacy questions and requests: hello@ptova.com.