Privacy policy

1. What data is processed

Only the three fields of the sign-up form, and nothing else:

• Organisation. Free text, so we know who we are talking to. It does not identify the licence and may be a trading name
• Contact email. This is what identifies your licence: it is used to issue, extend, renew and recover it
• Server identifier. The value the agent prints (machine-id:… or tpm:…). It identifies a machine, not a person, and it is what ties the licence to that server

2. What is not collected

This site uses no cookies —none at all, not even "technical" ones—, carries no analytics or tracking pixels, loads no third-party resources, and the server does not log visitors' IP addresses. There is no profiling, no advertising and no sharing of data for commercial purposes.

Nothing is sent to this site from the server you protect: the agent decides inside your machine and queries no cloud.

3. Why it is processed, and on what legal basis

To issue the licence you asked for and to keep it alive: verifying the address is yours, leaving you the link to your customer area, and warning you before it expires. The legal basis is performance of a contract or pre-contractual measures at your request —Article 6(1)(b) of Regulation (EU) 2016/679—.

Your address is not used to send you marketing. Were we ever to want to, it would take your express and separate consent.

4. How long it is kept

The file holding your licence is kept for as long as the licence keeps being renewed. Once you stop renewing it, it is deleted along with the associated email address.

The links we send are single-use or valid for 24 hours, and all that remains of them on disk is their cryptographic hash: a leaked backup contains no usable links.

5. Who else sees it

Nobody, other than the provider that delivers the outgoing mail, acting as a processor and for that purpose only. There are no international transfers outside the European Economic Area, and no disclosures to third parties beyond any applicable legal obligations.

6. How it is protected

The measures are what you would expect from someone who sells security, and they can be checked from outside:

• All site traffic travels encrypted, with its own certificate and automatic renewal
• The customer area does not open by typing an address: it takes the link sent to that address, so knowing it is not enough to see the licence
• The form answers the same whether or not the email exists, so the site cannot be used to find out who has the product installed
• The key that signs licences is not held in the process exposed to the internet

7. Your rights

You can access your data, rectify it, erase it, object to the processing, restrict it or request its portability by writing to the contact address above. We answer within one month.

If you believe we have not handled it properly, you can complain to the Spanish Data Protection Agency (www.aepd.es), which is the competent supervisory authority.

Last updated: 10 August 2026