This is a plain-language template. Adapt it to your jurisdiction and the third-party services you actually use.

1. Information we collect

  • Account data — your name, username, email address and a hashed password. If you use Google sign-in, we receive your Google identifier and basic profile.
  • Security data — two-factor secrets and recovery codes, stored to protect your account, plus sign-in times and IP addresses.
  • Usage data — pages viewed, downloads, favourites and reviews, used to run and improve the Service.
  • Payment data — donation amounts and transaction references. Card and bank details are handled by PayPal or Stripe; we never store them.

2. How we use it

We use your information to provide and secure the Service, deliver downloads, process donations, send transactional emails (such as verification and password resets), moderate content, and respond to support requests.

3. Cookies and sessions

We use a session cookie to keep you signed in and a CSRF token to protect forms. We do not use advertising trackers. Your theme preference is stored locally in your browser.

4. Sharing

We share data only with service providers who help us operate the Service — for example hosting, email delivery, Google sign-in, and payment processors — and only as needed. We do not sell your personal information.

5. Security

Passwords are hashed with a modern algorithm, connections are encrypted in transit, and administrative actions are logged. No system is perfectly secure, so please use a strong, unique password and enable two-factor authentication.

6. Retention

We keep account data while your account is active and for a reasonable period afterwards to meet legal or operational needs. You can ask us to delete your account at any time.

7. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, or to object to certain processing. To exercise these rights, contact us.

8. Children

The Service is not directed to children below the age of digital consent in their jurisdiction, and we do not knowingly collect their data.

9. Contact

Privacy questions? Contact us or email hello@massasoftware.com.