Privacy Policy

Last updated: July 4, 2026

Effective date: July 4, 2026

This Privacy Policy explains what data Selix collects, why, and what you can do about it. It covers our website (the "Site"), your account, and the Selix desktop application (the "Application").

We kept this short and plain on purpose. If anything is unclear, email Selix support and a person will answer.

The controller of your data is Selix. You can reach us at Selix support.

## Start here: what we can't see

We think this matters most, so we put it first.

We do not know, and cannot know, what you do inside the Application. We do not see what you inject into, which scripts you run, or which functions you call. That data never reaches us.

What we do collect is limited, and most of it is optional. The rest of this page is the detail.

## What we collect

### Your account

When you register, you give us two things:

- Your email. We use it for technical messages only: password resets, email changes, security notices, and important changes to the Service.

- Your password. We store it hashed. We never see it in plain text, and we cannot recover it for you, only reset it.

That's the whole account. We don't ask for your name, phone number, or anything else.

### Telemetry in the Application (only if you say yes)

Telemetry is off until you opt in. You can use the Application without it, and you can turn it off later. If you consent, we collect:

- Product analytics and heatmaps (PostHog). How often features are used and how people move through the interface. Heatmaps are masked, so the content of your screen is hidden, not recorded.

- Crash reports (Sentry). When the Application crashes, we receive a crash report and a minidump of our app so we can fix the bug. Be aware: a minidump can contain local file paths, and a Windows file path often includes your device username. Sentry also records the IP address the report came from. We cannot tell which key or account a crash report belongs to.

We use this to fix crashes and improve the Application. Nothing here tells us what you ran.

### The Site

When you use the Site, we collect:

- Activation data. Which activation link was used, the region it was used from, and which reseller it came from. We need this to make subscriptions work and to keep our reseller program honest.

- Site analytics and heatmaps (PostHog). How people use the Site, including approximate region. PostHog records IP addresses as part of this.

- A/B tests. We sometimes show different versions of a page to see which works better.

### Resellers

We collect nothing about a reseller's customers beyond the activation record described above. Your payment goes to the reseller, not to us. We never receive or store your payment-card details.

## Why we're allowed to use it (legal bases)

If you're in the EU, UK, or a similar regime, here are our legal bases under the GDPR:

- Performance of a contract. Your email, hashed password, and activation data are needed to give you the Service you signed up for.

- Consent. App telemetry (PostHog, Sentry) and non-essential Site analytics run only after you agree. You can withdraw consent at any time.

- Legitimate interests. Keeping the Service secure, preventing fraud and resale abuse, and fixing crashes. We balance these against your rights.

## Who we share it with

We don't sell your data. We share it only with the providers that help us run the Service:

- PostHog — product and site analytics, heatmaps, A/B tests.

- Sentry — crash reporting and minidumps.

- Our hosting and email providers — to run the Site, store accounts, and send technical email.

These providers act as our processors and may only use the data to provide their service to us. We may also disclose data if the law requires it, or to protect our rights, users, or the Service.

## Where your data goes

We picked the EU region for both PostHog and Sentry, so your analytics and crash data are stored and processed in the EU (Frankfurt), not shipped overseas. Both PostHog and Sentry are US-headquartered companies, so to the extent any access from outside the EU could happen, we rely on the European Commission's Standard Contractual Clauses as a safeguard. If we ever use another provider that processes data outside the EU, the same safeguard applies. Email Selix support if you want the details.

## How long we keep it

- Account data — while your account exists. Delete your account and it's gone (see below).

- Crash reports — kept up to [X] days/months, then deleted automatically.

- Analytics and activation data — kept up to [X] months in identifiable form, then aggregated or deleted.

If a longer period is required by law (for example, to handle a dispute), we keep only what we need for that purpose.

## Your rights, and how to use them

You can do most of this yourself on the Site, under your account settings:

- Download your data. Export everything we hold about you, except your hashed password (which is meaningless to export and unsafe to share).

- Delete your data. Delete your account and the data tied to it.

You also have the right to correct your data, object to or restrict certain processing, withdraw consent, and complain to your local data protection authority. To exercise a right we don't offer as a button, email Selix support. We'll respond within the time the law requires (usually one month under the GDPR).

Withdrawing telemetry consent stops future collection. It doesn't undo processing that already happened lawfully.

## Children

You must be at least 13 to use Selix, and minors need a parent's or guardian's consent (see the Terms of Service). We don't knowingly collect data from children under 13. If you believe a child under 13 has given us data, email Selix support and we'll delete it.

Because telemetry is optional and off by default, the simplest way to limit data from a younger user is to leave telemetry off.

## Security

We hash passwords, restrict access to data, and rely on established providers (PostHog, Sentry). No system is perfectly secure, but if a breach affects you, we'll act and notify you where the law requires it.

We can't say that using the Application will go undetected by any platform, and detection isn't a data-privacy event on our side. That's covered in the Terms of Service.

## Changes to this policy

If we change this policy in a way that matters, we'll post the new version here with a fresh "Last updated" date and, for material changes, email the address on your account. Continuing to use the Service after a change means you accept it.

## Contact

- Contact: Selix support

If we are required to appoint a Data Protection Officer or an EU/UK representative, their contact details will be listed here.