Privacy Policy.

Who is responsible

GafferMind is operated by Walid Kabassi as an individual / sole operator. Walid Kabassi is the person responsible for privacy matters. Questions and privacy requests can be sent to support@gaffermind.com.

Information GafferMind processes

• Accounts and authentication: email address, Supabase account UUID, essential session data, and authentication records needed to register, sign in, recover an account, and keep sessions secure.
• Licensing and access: product edition, entitlement and license status, activation records, device-slot usage, and entitlement revision data needed to provide Free and Pro access.
• Device activation: a Desktop-derived one-way device fingerprint hash and an optional device display name. Raw machine or hardware identifiers remain on the Desktop device and are not sent to GafferMind.
• Product updates: an email address and consent record when someone joins the updates list.
• Payments, when checkout is enabled: order amount, currency, payment and refund status, provider references, and related entitlement facts. Stripe processes payment details; GafferMind does not store full card numbers or card security codes.
• Support: the email address, message, and related account or technical details a person chooses to provide when contacting support.

Web Analytics

GafferMind uses Vercel Web Analytics to understand aggregate site usage, including page views, referrers, approximate location, browser, operating system, and device category. GafferMind removes query strings and fragments before sending eligible public page views and excludes account, administration, activation, API, and sensitive authentication paths.

Vercel Web Analytics does not use analytics cookies. Vercel derives a short-lived daily visitor hash from request information for aggregate reporting. Page views and visitor estimates are not exact counts of individual people and are not joined to GafferMind accounts.

First-party product telemetry

GafferMind records a bounded set of product events to understand the signup and login funnel, product reliability, and release delivery. Records can include the event name and time, a controlled source path, and, for authenticated events, the Supabase account UUID. Download events can also include the authoritative release identifier, version, and channel.

Anonymous pricing and signup-start events do not use an analytics cookie or persistent anonymous identifier. Product telemetry does not store email addresses, raw IP addresses, raw user-agent strings, passwords, authentication tokens, entitlement signing secrets, or device fingerprints.

A download request is different from an authorized delivery, and an authorized delivery redirect does not prove that software was installed or used.

Cookies and operational data

Essential cookies are used for account authentication and session security. GafferMind does not use cookies, local storage, session storage, or a persistent browser identifier for analytics in the current implementation. Hosting, authentication, and security providers may process ordinary request and security-log information to operate, protect, and troubleshoot their services.

Why information is used

Information is used to provide and secure accounts, enforce entitlements and device limits, deliver compatible releases, respond to support, maintain transaction and dispute records when payments are enabled, understand site and product usage, measure launch funnels, and improve reliability.

Service providers

GafferMind uses Supabase for authentication and application data, Vercel for hosting and Web Analytics, and Stripe for payment processing when checkout is enabled. These providers process information needed to deliver their services under their own contractual and privacy obligations. GafferMind does not sell customer information or use product telemetry for cross-site advertising.

Retention

GafferMind retains personal and product information only as reasonably necessary for the purposes described here, account and security requirements, legal or accounting obligations, and dispute handling. No fixed product-telemetry retention period has been adopted. Some records may need to be preserved where deletion would conflict with legal, security, transaction, or dispute obligations.

Your requests

You may ask for access to, correction of, or deletion of your personal information where applicable, or ask a privacy question, by emailing support@gaffermind.com. GafferMind may need to verify the request and may retain information where required or permitted for security, legal, accounting, or dispute purposes. Rights vary by location, and this policy does not limit non-waivable rights available under applicable law.

Changes

This policy may be updated when GafferMind features, providers, or data practices change. The effective date above will be updated when a revised policy is published.