Privacy

Placeholder: the privacy policy goes here (GDPR, written or checked by a lawyer). The facts it needs to describe:

• Controller: Persistence Labs BV, contact support@handover.show; a data protection officer if one is required.
• This website runs on our own server, hosted by Infomaniak (Infomaniak Network SA, Geneva) in Switzerland, a country the EU recognises as protecting personal data adequately. It sets no cookies of its own and has no analytics, tracking or session recording. Fonts are the visitor's own system fonts (nothing from Google Fonts). Paddle's checkout script loads only when the visitor opens the checkout, and guide videos load from YouTube only when the visitor presses Play.
• Server logs: for each request to the website and the licence server, the server notes the time, the IP address, the address asked for, the answer's status and size and how long it took (no cookies or passwords). The licence server's own log also notes the program that asked (the browser or Handover, from its user agent) and which account, licence or computer the request was about. When a purchase needs one of us to look at it, the log also notes the order number and the buyer's email address. All of it is kept 14 days, then deleted automatically. Purpose: keeping the site and the licences running and secure.
• Buying goes through Paddle (merchant of record): name, email, billing address and payment data are processed by Paddle under its own privacy policy. Paddle sends us the email and name for the account.
• Your Handover account and licences are on our own licence server (licence.handover.show, on the same server in Switzerland), which runs Keygen Community Edition, software we run ourselves; Keygen the company doesn't receive them. Kept: email, name, password (hashed), licences, and per activated computer a fingerprint derived from the operating system's machine id, the computer name and the platform. Purpose: delivering and checking the licence.
• Backups: the account and licence data is backed up every night, encrypted before it leaves the server, to Infomaniak's Swiss Backup in Switzerland: the last 30 nights and one copy a month for 12 months, then deleted. We may keep an encrypted copy of the monthly backup on our own computer, for the same 12 months. So something deleted from the licence server can stay in a backup for up to 12 months.
• Emails (setting your password, receipts for seats) are sent through Resend: email address and the message.
• The Handover app contacts the licence service only to sign in, activate, deactivate, free a seat and renew its licence file (weekly when online). It sends no usage data.
• Feature requests sent from the app (Settings → About) go through this website to us by email (Resend), only when the operator presses Send: what they typed, the email address they give (optional, so we can answer), and, only if they tick it, Handover's version, edition and the operating system. The website keeps no copy; it counts requests per IP address for 10 minutes, in memory, to stop floods (and the server log has the request's line, above).
• The account and activation pages talk to our licence server directly from your browser. Your sign-in lasts only while the page is open.
• Who it's for: Handover is professional software for lighting and show technicians; the site and the shop aren't aimed at children.
• Legal bases, how long data is kept, transfers outside the EU (and the safeguards), and your rights (access, correction, deletion, objection, complaint to a supervisory authority).