Privacy Policy

Trefoila is desktop software for optical design. This policy explains what limited information is collected when you visit this website or use the application, and how it is handled. The short version: we collect very little, we don't sell anything, and payment data never touches our servers.

---

1 — Information We Collect

Website Analytics

This website uses GoatCounter for privacy-friendly analytics. GoatCounter records page views, the referring URL, and the visitor's country derived from the IP address, which is then immediately discarded. No cookies are set, no personal data is stored, and no information is passed to third parties. See GoatCounter's privacy policy.

License Activation

When you activate a license in the Trefoila application, the license key you enter is sent to LemonSqueezy's servers for validation. A machine fingerprint — a one-way cryptographic hash of your device's network hardware address and hostname — is transmitted to associate the license with your device. This fingerprint cannot be reversed to identify you. It is stored locally on your machine at ~/.config/trefoila/license.json alongside your license status. We do not receive or store this fingerprint on our servers.

Purchase & Payment

Payments are processed entirely by LemonSqueezy, a Stripe company acting as Merchant of Record. We receive your name and email address from LemonSqueezy after a successful purchase in order to provide support. We do not receive or store credit card numbers or other payment instrument details. LemonSqueezy's Privacy Policy governs how your payment data is processed.

---

2 — How We Use Information

The limited information we receive is used only to:

• Validate and manage software licenses
• Respond to support and billing requests
• Understand aggregate website traffic (country-level only)

We do not use it for advertising, profiling, or any purpose beyond operating the software.

---

3 — Information Sharing

We do not sell, rent, or share your personal information with third parties, except as necessary to operate the service:

• LemonSqueezy — payment processing and license management
• GoatCounter — anonymous website analytics

Both services are bound by their own privacy policies and applicable data protection law.

---

4 — Data Retention

Purchase records and customer email addresses are retained for as long as a subscription is active and for a reasonable period afterward for tax and legal compliance. GoatCounter retains aggregate view counts; no personal data is retained there. The license file on your machine can be deleted at any time by removing ~/.config/trefoila/license.json.

---

5 — Your Rights

Depending on where you are located, you may have the right to request access to, correction of, or deletion of personal data we hold. Because we store very little (your name and email from LemonSqueezy), most requests can be handled by email. For data held by LemonSqueezy — including payment history and invoices — contact them directly via their privacy portal.

---

6 — Security

License validation uses HTTPS. Payment processing is handled entirely by LemonSqueezy and Stripe, which are PCI-DSS compliant. We do not operate servers that store payment data.

---

7 — Children

Trefoila is professional software not directed at children under 13. We do not knowingly collect information from anyone under 13.

---

8 — Changes to This Policy

If we make material changes, we will update the effective date above. Continued use of the software or website after changes constitutes acceptance.