1. Who we are
"MartyRun" is operated by an independent developer based in France. Contact: [email protected].
2. What we collect
- Account data: email, password (hashed with PBKDF2-SHA256, never stored in plain text), creation date, last login.
- Payment metadata: plan purchased, amount, currency, payment processor transaction ID. We do NOT see your crypto wallet address or any banking detail — that stays with NOWPayments.
- License & devices: your license key, the number of devices you've activated, and basic device labels you choose.
- Server logs: standard HTTP access logs (IP, user-agent, timestamp) kept up to 30 days for security and debugging.
We do not sell, rent, or share your data with advertisers. We do not track you across other websites.
3. Why we collect it
- Run the Service (authenticate you, deliver your license, run your devices)
- Send transactional emails (welcome, license, receipt, password reset, expiry warning) — never marketing without explicit opt-in
- Comply with our legal obligations (tax records on payments)
- Detect and prevent abuse / fraud
4. Where data is stored
All servers are located in Germany (Hetzner). Email delivery goes through Resend (EU region). Payment processing goes through NOWPayments (their own jurisdiction). All data in transit is encrypted via TLS.
5. Your rights (GDPR)
If you're in the EU/EEA, under GDPR you have the right to:
- Access the data we have about you — use /dashboard/account → "Download my data".
- Rectify incorrect data — email us.
- Delete your data — use the "Delete my account" button in Account Settings.
- Portability — same as access: download a JSON of your data.
- Object to processing — email us.
- Complain to the CNIL (French DPA) if you think we mishandled your data.
6. Retention
- Account data: until you delete your account.
- Payment records: kept 10 years for tax compliance (French legal requirement) even after account deletion.
- Server logs: 30 days.
- Email logs (Resend): per Resend's own retention.
7. Cookies
We use a single first-party session cookie (_session) to keep you signed in. No third-party tracking, no analytics cookies, no advertising cookies.
8. Children
MartyRun is not intended for users under 18. We do not knowingly collect data from minors.
9. Changes
Material changes to this policy will be announced by email. The "Last updated" date at the top of this page always reflects the current version.
10. Contact
For privacy questions or to exercise your GDPR rights: [email protected].