Privacy Policy.

We collect only what we need to run the service:

• Email address and billing details — collected at checkout. Payment processing is handled entirely by Stripe; we never see or store raw card numbers.
• Machine ID — a hardware fingerprint string submitted by the desktop app when you activate a license. Used solely to issue and validate your license key.
• Account information — name and email captured when you create an account or sign in via our authentication provider (Clerk). Required to gate the trial download and manage your license.
• Onboarding details — company name and job title you optionally provide after signing up. Helps us understand who uses the product and improve it.
• Anonymous usage analytics — page views and referrer URLs. IP addresses are hashed with a rotating salt before recording and are never stored in raw form. We use Plausible, a privacy-friendly analytics tool with no cross-site tracking.

The data we collect is used to:

• Deliver and activate your Indolent Forge Nesting license.
• Send your license key and transactional emails (order confirmation, support replies).
• Provide customer support and troubleshoot issues.
• Understand aggregate site usage so we can improve the product and marketing — never individual surveillance.
• Comply with tax reporting, accounting, and legal obligations.

We do not use your data for advertising, profiling, or any purpose not listed here.

We use a small number of trusted services to run the product. Each receives only the data they need to do their job:

• Stripe — payment processing and tax calculation. Your card details go directly to Stripe and are governed by Stripe’s privacy policy.
• Resend — transactional email delivery (license key, order confirmation).
• Clerk — user authentication, account management, and session handling.
• Plausible — privacy-friendly, cookie-free web analytics. No cross-site tracking, no personal profiles.
• Railway / Postgres — cloud hosting and database. Your order records, license data, and account information are stored here.

We do not sell your personal data to any third party. We do not share it with advertisers, data brokers, or “partners” — only the processors above, to run the service.

We set a single first-party session cookie (ifs_sid) used for analytics session continuity — it lets us count a multi-page visit as one session rather than ten. Clerk sets its own authentication cookies when you sign in.

We do not use third-party advertising cookies. There are no tracking pixels, no session replay scripts, and no cross-site fingerprinting on this site.

Order records, license issuance records, and account information are retained as long as needed to provide support, honor warranty obligations, and satisfy tax and legal requirements. Analytics events are retained in aggregate form only — there is no personal record associated with individual page views.

If you request deletion of your account, we remove personal identifiers from our systems within a reasonable time, except where retention is required by law (e.g., tax records).

You can request access to, correction of, or deletion of any personal data we hold about you. Email us at support@indolent.design and we will respond within a reasonable timeframe. We do not require you to fill out a form or jump through hoops — a plain email is enough.

If we make material changes to this policy, we will update the “Last updated” date at the top of this page and, where appropriate, notify you by email. Continued use of the product or site after a change constitutes acceptance of the updated policy.

Questions, requests, or concerns about your privacy — email us directly:

support@indolent.design

Indolent Designs LLC — Phoenix, AZ