Privacy policy

Version 1. This policy explains what personal data we process on the UltraZone website (ultrazone.app), in the app and when you buy. UltraZone is built to keep as little as possible: your settings, layouts, profiles and the app’s logs stay on your computer. The app has no telemetry or analytics and sends nothing about how you use it.

1. Controller

• Data controller: Andreu Martínez Arribas
• Tax ID (NIF): 47886131Q
• Address: Calle Diego de Almagro 13, 08204 Sabadell (Barcelona), Spain
• Privacy contact: hello@ultrazone.app

2. What data we process and why

Data	Why	Legal basis	How long
Anonymous computer identifier: a hash (irreversible fingerprint) of your Windows installation’s identifier. The identifier itself is never sent.	Track the free 14-day trial so it isn’t repeated on the same computer. Know which computers each license is active on.	Performance of the contract (Art. 6(1)(b) GDPR) and legitimate interest in preventing trial abuse (Art. 6(1)(f)).	While UltraZone is on sale, so the trial isn’t repeated.
License code, stored only as a hash, the order number, the identifier of each activation and their dates.	Activate, check and free up the license, and revoke it after a refund.	Performance of the contract.	While the license is active and up to 5 years after, to handle claims.
Purchase data provided by Lemon Squeezy: name, email, country, amount and order.	Handle support and refunds, and meet tax and accounting obligations.	Performance of the contract and legal obligation (Art. 6(1)(c)).	Up to 6 years, as required by tax and commercial law.
Emails you send us.	Reply to you.	Performance of the contract or legitimate interest in answering you.	While the request is open and up to 2 years after.
IP address and technical connection data (browser, date, page or request).	Keep the website and the license server working, limit requests to prevent abuse and detect errors.	Legitimate interest in the security and operation of the service.	The license server doesn’t store it in its database. Our providers’ technical logs are deleted automatically within a few days (30 at most).

We don’t use your data for advertising, we don’t build profiles and we don’t sell it.

3. The website

• It uses no cookies or advertising trackers.
• To know how many visits it gets, it uses Vercel Web Analytics, which counts visits in aggregate, without cookies and without identifying you.
• Your language and color choices are saved in your browser’s local storage and never leave your device.
• Fonts are served from the website itself.
• When you click “Buy”, Lemon Squeezy’s checkout opens over the website. What you enter there goes to Lemon Squeezy, which may use the cookies needed for the payment, under its own policy.

4. When the app goes online

• License server (ours, hosted on Cloudflare): when you start the trial, when you activate or free up the code and about once a day to check the license. It sends the anonymous computer identifier and, if there’s a license, the code. The server checks the code with Lemon Squeezy.
• Updates (GitHub): shortly after it opens and every 12 hours, if automatic checking is on (you can turn it off in Settings). The app and its updates are also downloaded from GitHub, without sending any of your data beyond the connection itself.
• Bug reports: the app’s “Help & Support” page prepares a report that you choose to open on GitHub (where it’s public) or copy and send another way. It only includes system information if you tick it.
• “Web in zone”: the pages you open load directly from their servers, through Microsoft’s WebView2 component. Those pages process your data under their own policies; UltraZone doesn’t see or send their content. Their cookies and sessions are stored only on your computer, in UltraZone’s data folder.
• Microsoft components: the app uses Microsoft’s Windows App SDK and WebView2, which may send diagnostic data to Microsoft according to your Windows privacy settings (Windows Settings → Privacy & security → Diagnostics & feedback). Microsoft processes it as controller under its privacy statement (aka.ms/privacy). We don’t receive that data.

5. Who it’s shared with

Who	What it does	Where
Lemon Squeezy (or the Stripe entity that replaces it)	Sells the license as reseller: processes payment and billing data as an independent controller, under its own privacy policy.	USA
Cloudflare	Hosts the license server, its database and its technical logs, and forwards email sent to hello@ultrazone.app, as processor.	USA and its global network
Vercel	Hosts the website and counts visits, as processor.	USA and its global network
GitHub (Microsoft)	Hosts the downloads, the updates and any bug reports you publish; processes the IP of whoever downloads under its own policy.	USA
Our email provider	Stores the emails you send us, as processor.	EU or USA

Transfers to the USA rely on the EU-US Data Privacy Framework, where the provider is certified, or on the European Commission’s standard contractual clauses included in their contracts.

6. Your rights

You can request access, rectification, erasure, objection, restriction and portability of your data by emailing hello@ultrazone.app. To find your license data we’ll need the code or the purchase email. Note that if we delete the trial or license record, the app will no longer be able to check it on that computer.

If you think we haven’t handled your data properly, you can complain to the Spanish Data Protection Agency (www.aepd.es) or to the data protection authority in your country.

7. Security

Connections are encrypted (HTTPS). We store license codes and the computer identifier only as hashes. The license server’s responses are signed so they can’t be forged.

8. Children

UltraZone is not aimed at children under 14. To buy, you must be an adult or have permission from your parents or guardians.

9. Changes

If we change this policy in an important way, you’ll see it in the app or on the website before it applies.

This policy exists in Spanish and English. If they differ, the Spanish version prevails.