Privacy Policy
The privacy policy you agree to by using Thin32 tools.
Last updated: January 17, 2026
The Short Version
We don't collect your data. The software runs entirely offline on your computer. We only know you exist if you email us or buy a license through Paddle.
Data We DON'T Collect
Our software is designed to respect your privacy:
- No telemetry - Nothing is sent to our servers
- No analytics - We don't track usage, features, or behavior
- No crash reports - No automatic error reporting
- No update checks - Software doesn't "phone home"
- No account required - You can use all tools without registration
Data We DO Collect
1. When You Purchase a License
What we collect:
- Email address (to deliver your license key)
- Payment information (processed by Paddle, see below)
- License validation requests (only when you activate your license)
Why
- To provide you with your license and updates
- To prevent license fraud and abuse
- To send critical security updates (we won't spam you)
How long
- We retain purchase records for 7 years (Belgian accounting law requirement)
- Email addresses indefinitely unless you request deletion
2. When You Email Us
What we collect:
- Your email address and message content
- Any files or screenshots you attach
3. Website Visitors
What we collect: Nothing. No cookies, no analytics, no tracking pixels.
Our website is static HTML/CSS. Your browser requests files, we serve them. That's it.
Web server logs
- Our hosting provider may log IP addresses and access times for security purposes
- We don't access or analyze these logs unless investigating an attack
- Logs are automatically deleted after 30 days
Local Configuration Files
Current status: Configuration features are not yet implemented in any Thin32 tools.
If/when we add configuration:
- Preferences will be stored locally on your computer in standard Windows directories
- These files will contain only your settings (keyboard shortcuts, UI preferences, etc.)
- They will never be transmitted over the network
- We will have zero access to them
- You can delete them anytime by uninstalling or removing the folder manually
Third-Party Services
Paddle (Payment Processor)
When you purchase a license, payment is processed by Paddle (paddle.com).
Paddle collects
- Name, email, billing address
- Payment method details
- VAT/Tax information (if applicable)
Paddle's role
- Merchant of Record (they handle VAT, invoices, refunds)
- GDPR-compliant processor
- They share only your email and license details with us
Future Services
If we integrate additional services (e.g., optional newsletter via Mailchimp):
- We'll update this policy first
- Opt-in only - never automatic
- Clear unsubscribe option
Your Rights (GDPR & Belgian Law)
You have the right to:
- Access: Request what data we have about you
- Rectification: Correct inaccurate data
- Erasure: Delete your data (with legal exceptions like accounting records)
- Portability: Receive your data in machine-readable format
- Objection: Object to processing (we barely process anything anyway)
- Withdraw consent: Unsubscribe from emails or delete your account
Data Security
Since we collect almost nothing, there's little to breach. For what we do collect:
- Email communication via encrypted connections (TLS)
- License database stored with encryption at rest
- Access limited to Thin32 team only (currently 2 people)
- No third-party access except Paddle (payment processor)
International Transfers
Data location:
- Email: Stored on servers in the EU
- Paddle: May process payments globally (see their privacy policy)
- We don't transfer data outside the EU otherwise
Children's Privacy
Thin32 tools aren't directed at children under 16. We don't knowingly collect data from minors. If we discover we have, we'll delete it immediately.
Changes to This Policy
We'll update the "Last updated" date at the top when changes occur.
For major changes:
- We'll email Pro/Enterprise license holders
- Post notice on thin32.win for 30 days
Contact & Complaints
Questions? contact@thin32.win
Complaints: You can file a complaint with Belgium's Data Protection Authority:
Website: gegevensbeschermingsautoriteit.be