Privacy Policy
Last updated: September 16, 2026
Overview
At Ventana Tools LLC ("Ventana", "we", "us", or "our"), we take your privacy seriously. This Privacy Policy explains how we collect, use, and protect your information when you use our products and visit our website.
Information We Collect
Information You Provide
- Account information (email address, name) when you create an account or purchase products
- Payment information (processed and handled securely through our payment provider, LemonSqueezy, or by the app store for in-app purchases: Google Play on Android, Apple on iOS)
- Support requests and communications you send to us
- Product activation and license information
- The purchase email address you type into one of our mobile apps to verify a desktop purchase, described in License verification in our mobile apps below
Information Collected Automatically
- Device information necessary for license activation
- An anonymous install ping from our desktop applications, containing no personal information (see Anonymous install analytics below). Our mobile apps send no ping at all
- Website analytics through Fathom Analytics (privacy-focused, no cookies, no personal data tracking)
- Download and CDN usage data through Digital Ocean Spaces (for download delivery and site content delivery)
Analytics
We use Fathom Analytics to understand how visitors use our website. Fathom is a privacy-focused analytics platform that:
- Does not use cookies
- Does not track personal information
- Does not collect IP addresses
- Is fully GDPR, CCPA, and PECR compliant
Fathom only collects aggregate data such as page views, referrer information, and general geographic location (country/region level). Learn more about Fathom's privacy practices at usefathom.com/privacy.
Anonymous Install Analytics
Our desktop applications send a single anonymous ping when they launch, so we can answer one question: how many installs exist, and in what licensing state. Aside from checking for updates and validating a license key you enter, this ping is the only thing our apps send us. We publish the aggregate results openly at insights.ventana.tools— everything we collect is visible to you and to everyone else.
Each ping contains only:
- A random install identifier — a value generated on your device that is not derived from your hardware, your user account, or anything about you
- Which app and edition it is, and the app version
- The release channel (stable or beta) and CPU architecture (x64 or ARM64)
- A coarse operating system label — only “Windows 10” or “Windows 11”, never a build number
- The current license state (free, trial, trial expired, licensed, or license lapsed)
- When licensed, a one-way cryptographic hash of your license key — never the key itself — so we can count distinct active licenses
Our apps never send, and this ping never contains:
- Your name, email address, account, or any personal identifier
- Your IP address. Our server derives only a coarse country from the network edge and never stores the IP
- Any document, file, image, file name, or file path
- Any record of how you use the app — no feature usage, clicks, keystrokes, screens viewed, or behavioral profiling of any kind
- Your machine name, Windows user name, or a hardware fingerprint
- Crash reports or diagnostic dumps
The ping is sent at most once per launch, and only when the reported state has changed or roughly a day has passed. It goes to updates.ventana.tools, the same domain our apps already contact for update checks. It is always on and is documented here rather than buried behind a setting.
License verification in our mobile apps
Our mobile apps are sold through the platform's own store, and they send no install ping. There is one case where a mobile app sends us anything at all: unlocking it because you already bought the desktop version.
If you choose that, you type the email address you bought the desktop product with. The app sends that address, the platform name, and a per-install identifier (32 random bytes generated on your device, sent only as a one-way hash) to our license service, which emails a six-digit code to the address if it belongs to a purchase. Entering the code returns a signed unlock the app stores on your device and can check offline.
How that is handled:
- We store a one-way hash of the address in a record that expires after ten minutes, never the address itself, and the code is sent to it once.
- The answer to a code request is the same, and takes the same time, whether or not the address bought anything. It cannot be used to find out who our customers are.
- A completed unlock is stored as an opaque reference with the identifier of the purchase behind it, so a refund can remove it. No email address is stored with it.
- Verification emails are transactional. They carry no tracking pixel, and we never add these addresses to a mailing list.
- We delete the purchase identifier and the installation binding from revoked unlocks after 90 days.
In-app purchases are different: the store is the seller, and we receive from Google or Apple only confirmation that the signed-in account holds the purchase. On iOS, your documents may also sit in your own iCloud storage if you leave iCloud on; that is your Apple Account, and we have no access to it. See the Feather privacy policy for the detail.
How We Use Your Information
- To provide and activate your software licenses
- To process payments and prevent fraud
- To provide customer support
- To send important product updates and security notifications
- To improve our products and services
- To comply with legal obligations
Data Sharing
We do not sell, rent, or trade your personal information. We may share your information with:
- Lemon Squeezy: Our payment processor and merchant of record for purchases made through our website
- Microsoft Store: For products distributed through their platform
- Google Play: The seller for in-app purchases in our Android apps. Google processes the payment and tells the app whether the signed-in account owns the purchase; we never receive payment details
- Apple: The seller for in-app purchases in our iOS apps, on the same terms. Apple also stores the documents and settings our iOS apps put in iCloud, under your own Apple Account rather than ours
- Cloudflare: Hosts our website and our license verification service, and delivers verification emails
- Fathom Analytics: Anonymous website usage data only
- Digital Ocean Spaces: For download delivery and site CDN services
- Legal Authorities & Data Disclosure: We do not track how you use our products. Our desktop applications collect no behavioral or usage data and never access your documents or files. The only thing they report is the anonymous install ping described in Anonymous Install Analytics above, which carries no personal identifier. Beyond that, the personal information we can access comes from purchases made through LemonSqueezy, our payment and license provider. LemonSqueezy shares with us only the minimal information needed to manage your order and license, which may include:
- Your name
- Your email address
- Your general location
- Product purchased
- License key and license status
Data Retention
We retain your personal information only as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. License and purchase records are retained for tax and accounting purposes as required by law.
Your Rights
You have the right to:
- Access the personal information we have about you
- Request correction of inaccurate information
- Request deletion of your information (subject to legal requirements)
- Opt-out of marketing communications
- Export your data in a portable format
Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure.
Children's Privacy
Our products and services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.
International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.
Contact Us
If you have questions about this Privacy Policy or our privacy practices, please contact us at:
Ventana Tools LLC
Email: privacy@ventana.tools