Privacy Policy

Information we collect and why

• Purchase and license: purchase email, order and license metadata, activation status and a random device ID, to deliver your license, activate the app and manage the 3-device limit.
• Download link email, only if you ask for it on this site: the email address you enter, to send that one email. We do not keep the address; only a one-way hash is kept for 2 days to prevent duplicate sends.
• Support: the messages, screenshots and purchase email you send us, to answer your request.
• Collected automatically: IP address (stored only as a one-way hash for rate limiting), request times, app version and operating system, and basic site analytics events, for security, abuse prevention and product improvement.
• We never receive payment card details. Paddle, our merchant of record, processes payments.

We process this information to complete your purchase or a step you asked for (such as sending the download link), to meet legal obligations, and to keep the service secure. Optional Clarity session analytics run only with your consent.

How long we keep it

• License records (hashed email, license and device data): while the license exists, and afterwards only as long as refunds, disputes or legal obligations require.
• Download link email: the address is not stored and its hash is deleted after 2 days. Our email provider keeps delivery logs for 30 days.
• The plain license key shown on the purchase-success page: deleted once it is shown, or after 7 days if it never is.
• Security and rate-limit records: 7 days. License reset and payment notification records: 90 days.
• Support emails: as long as needed to resolve your request.
• When a period ends, the data is deleted so it cannot be recovered.

Services that process data for us, including outside your country

• Paddle.com Market Limited (United Kingdom), privacy@paddle.com: as merchant of record, Paddle collects the details you enter at checkout (such as email, country and payment method) directly from you to process payment, receipts and tax, and keeps them under its own privacy policy and the retention periods required by law.
• Plus Five Five, Inc. / Resend (United States), privacy@resend.com: receives your email address and the email content (the license email includes your license key) to deliver the license email and the download link email. Delivery logs are kept for 30 days.
• Cloudflare, Inc. (United States), privacyquestions@cloudflare.com: receives IP address, request details, the hashed records we store and Turnstile bot-check signals, to host the site, API and database and keep them secure. Kept for the periods above, or until our service contract ends.
• PostHog, Inc. (United States), privacy@posthog.com: receives page paths, language, screen-size class, interaction events and connection data (including IP address) for cookieless site analytics. Kept until our service contract ends.
• Microsoft Corporation (United States), https://aka.ms/privacyresponse: only after you choose Allow, receives page interactions (clicks, scrolls) and connection data for Clarity session analytics. Never on the purchase-success, license-reset or activation pages. Kept under Microsoft's Clarity retention policy, or until our service contract ends.

When and how: data is sent over encrypted connections (HTTPS) at the moment you use the related feature. You can avoid a transfer by not using that feature (for example, skip the download link email or decline Clarity), although buying and activating need Paddle, Resend and Cloudflare.

We do not sell personal information or use it for advertising. We do not send raw license keys to analytics tools.

Cookies and browser storage

• tsl_lang cookie: remembers the language you chose.
• Browser storage: remembers your Clarity choice and keeps checkout and purchase-success details for the current visit.
• PostHog runs without cookies. Clarity sets cookies only after you choose Allow. You can clear or block cookies in your browser settings.

Your rights

• You can ask to see, correct or delete your information, to stop or limit its processing, or to withdraw consent, by emailing support@tinyslowlife.com. We reply without undue delay, and within 10 days where Korean law applies.
• Some records may be kept where the law requires it, for example for tax, refunds or disputes.
• You can also contact your local data protection authority. In Korea: the Personal Information Infringement Report Center (privacy.kisa.or.kr, 118) or the Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972).

Children

• The download link email is not for children under 14, and we do not knowingly collect their personal information. If you think we have, contact us and we will delete it.

How we protect it

• Email addresses, IP addresses, license keys and device IDs are stored only as one-way hashes, all traffic uses HTTPS, system access is limited to the operator, and expired records are deleted automatically.

Privacy contact and changes

• Controller: Nanuni Studio (Tiny Slow Life). Privacy inquiries and complaints: Nanuni Studio customer support, support@tinyslowlife.com
• We post any changes on this page with a new effective date. Effective date: October 11, 2026.