Privacy notice

We process anonymous, cookieless website analytics through PostHog EU Cloud, including page and section views, purchase-call-to-action placement, checkout progress, confirmed success-page visits, campaign source, medium and campaign, referring domain, and basic browser or device information. We do not send PostHog email addresses, license keys, payment-card data, full Stripe identifiers, form contents, or arbitrary page text. We separately process purchase and contact information, including your email address, Stripe customer and transaction identifiers, order status, license status, device fingerprint, activation history, installed version, release channel, delivery status, recovery requests, security and rate-limit signals, and support messages you send us.

We use anonymous analytics to understand traffic sources, whether visitors reach examples and pricing, which purchase placements are useful, and whether the checkout journey works. Our legal basis for this limited measurement is our legitimate interest in improving and operating the website. We process commercial information to perform the purchase and license contract, deliver and activate the product, provide updates and support, prevent abuse and fraud, maintain security, comply with accounting and legal obligations, and establish or defend legal claims. The legal bases are contract performance, legal obligations, and our legitimate interests in operating and protecting the service.

We use PostHog EU Cloud for anonymous website analytics, Stripe for payments, Supabase for commercial records and release authorization, Resend for transactional email, Netlify for hosting and request processing, and GitHub/npm for public installer distribution. PostHog analytics are sent to its EU ingestion service in cookieless server-hash mode with person profiles, IP capture, session recording, surveys, autocapture, and persistent browser storage disabled. These providers process data under their own safeguards and may process data outside the EEA using lawful transfer mechanisms where required. PostHog publishes more information at https://posthog.com/privacy.

Anonymous analytics data is retained only for as long as needed to understand website performance and improve the product. We periodically review and delete data that is no longer needed. Cookieless attribution is short-lived and may not connect visits across days, devices, browsers, or blocked requests. Order, payment, tax, license, and fraud-prevention records are retained for the periods required by Romanian law and for the lifetime of the license where necessary to provide access. Short-lived encrypted license-delivery payloads expire automatically. Recovery and security records are kept only as long as reasonably necessary for their purpose. We use access controls, encryption, signed entitlements, and data minimisation, but no system can promise absolute security.

Depending on applicable law, you may request access, correction, deletion, restriction, portability, or object to certain processing. You may also lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) or your local data-protection authority. Send requests to support@visualstandard.io.

We may update this notice when the product, providers, or legal requirements change. Material changes will be identified by an updated publication date.