Privacy Policy

Who is responsible

ThinkTools operates thinktools.dev and its product subdomains and is responsible for the data described here. Contact: humans@thinktools.dev.

What we store

When you buy

• Your email address, and your name if you give it.
• The order: product, tier, price, payment method, order status and dates, and your license key and download history (which files were downloaded, when, and from which IP address).
• Payment details needed to match your payment: for crypto, the amount, the receiving address and the transaction hash; for card or PayPal, the provider's payment reference. We never see or store card numbers.
• The IP address the order was placed from, the country derived from it, and your browser's user-agent string, used to prevent fraud and for tax records.

When you create an account

• Your email address, and your name if you give it.
• A hash of your password (bcrypt). We never store or see the password itself, and we can't tell you what it is.
• Whether and when you confirmed your email address, and short-lived, single-use links for confirming your email and resetting your password (we keep only a fingerprint of each link).
• Whether you asked for product news.

Your account is matched to your orders by email address, so the orders you placed with that address show up in your account.

When you write to us or subscribe

• Contact form: your name, email, message and the IP address it was sent from.
• Newsletter, product updates or a waitlist: your email address and which product you asked about.
• Emails you send to humans@thinktools.dev and our replies.

Why we use it

• To process your order, deliver your files and license key, and keep your order page working.
• To run your account: sign you in, confirm your email, and make sure only you can download what you bought.
• To answer support requests and messages.
• To prevent fraud and abuse, and to keep the records that accounting and tax law require.
• To send product news, only if you asked for it.

Emails we send

• Order emails: payment instructions when you place an order, a confirmation when payment is received, your download links and license key, and a notice if a quote expires. These are part of the service and are sent whether or not you subscribe to anything.
• Account emails: a link to confirm your email address, password reset links you ask for, and a notice if someone tries to create a second account with your address.
• Replies to messages you send us.
• Product news and updates, only if you opted in. Every one of these emails has a one-click unsubscribe link. To see whether these emails are useful, they contain a small image and tracked links that tell us whether a message was opened and which links were clicked.

What we don't do

• No third-party advertising trackers, ad pixels or cross-site tracking.
• No third-party analytics cookies. The store itself sets no tracking cookies. When you sign in, it sets a session cookie that keeps you signed in for up to 30 days, plus a small flag that only tells the page to show "Account" instead of "Sign in". Signing out removes both.
• We don't sell, rent or trade your data.

Who else sees it

• Payment providers. If you pay by card, PayPal or Razorpay, that provider processes your payment under its own privacy policy. Razorpay's checkout script is loaded only if you choose Razorpay.
• Blockchains. Crypto transactions are public by design. To confirm your payment we look up public transaction data on blockchain explorers; we don't send them your personal details.
• Our infrastructure. The store, its database and its mail server run on a server we operate.
• The law. We disclose data if we are legally required to.

How long we keep it

Orders and receipts are kept for as long as you may need your downloads and as long as accounting and tax law require. Your account is kept until you ask us to delete it; confirmation and reset links stop working after 24 hours and 1 hour. Messages are kept while we handle them and for a reasonable time after. Newsletter details are kept until you unsubscribe; after that we keep only a record that you unsubscribed, so we don't email you again.

Your rights

You can ask for a copy of the data we hold about you, ask us to correct it, or ask us to delete it, except for records we must keep by law. You can unsubscribe from product news at any time. Write to humans@thinktools.dev from the address you used with us. You can also complain to your local data protection authority.

Security

The site is served over HTTPS. Passwords are stored only as bcrypt hashes, sign-in attempts are rate limited, and downloads need a signed, expiring link plus a signed-in account with a confirmed email that matches the order. Order pages use long random links, and the admin area is restricted to staff accounts.

Children

The store is not intended for children under 16, and we don't knowingly collect their data.

Changes

If we change this policy, we update the date at the top of this page.