Privacy notice: harnsy key applications
Who is responsible
Pavel Buchnev, individual entrepreneur (Georgia), registration number 345621981, the licensor of harnsy, decides how this data is used (the “controller”). Contact: butschster@gmail.com.
What this covers
The application for a harnsy Max key you send from harnsy.dev, and the private status page you get for it. Reading the site stores none of this. Analytics cookies are a separate choice, made in the cookie bar.
What we keep
- Your email address.
- The number of licenses you ask for (1-3), your reason, and the language of the page.
- The date you sent the application and the version of this notice you agreed to.
- Our decision (approved or rejected), its date, what we granted (licenses and months) and a short internal note.
- A fingerprint (hash) of the secret in your status link. The link itself is shown to you once and we cannot restore it.
- Part of your IP address (the network, not the address itself), to limit how many applications come from one network per hour.
Our web server also logs each request for 14 days, for security and to fix faults: the IP address, the time, the page address, the response status and the browser, never the contents of a form. The request for your status page is not logged at all.
What we do not keep
No account, no password, no payment details. We send you no email from the site. The key itself is not stored with your application: the harnsy licensing service holds it and shows it on your status page. The key names a licensee, never your email address.
Why and on what basis
- To read your application, decide on it and give you the key: this is a step you asked for before you receive a license (GDPR Art. 6(1)(b)).
- To keep the form and the server safe from spam and attacks (the IP data and logs): our legitimate interest in security (GDPR Art. 6(1)(f)).
- Where a law requires your consent for this (for example, in Russia), the box you tick next to the form is that consent.
We may write to you by hand from butschster@gmail.com if we need to ask about your application.
Who else sees it
- Our hosting provider, Hetzner Online GmbH, Falkenstein, Germany, which runs the server under a data processing agreement.
- Telegram: when an application arrives, a private channel of ours gets a short alert with its number and the number of licenses. It contains no email, no reason and nothing else about you.
- Nobody else. We do not sell your data and do not use it for advertising.
How long
- An application we reject: 12 months after the decision, then deleted.
- An application we approve: while the key is valid and 12 months after its end date, then deleted. If no key was issued: 12 months after the decision.
- An application with no decision: 12 months after it was sent, then deleted.
- The network part of your IP: 90 days. Web server logs: 14 days. Web server logs of the licensing service: 7 days (IP address, time and page address, with secrets masked).
- If you ask us to delete your application, we do it within 30 days; copies in backups disappear within 30 days. Deleting it also ends the status page. It does not revoke a key we already issued: the key works until its end date. The licensing service keeps a record of the key (an id, “applicant <n>”, seats and dates) and of the machines it is activated on, for as long as needed to check and support licenses; it holds no email or name from your application.
Your rights
You can ask to see the data we hold about you, to correct it, to delete it, to limit its use, to receive a copy, and to object to use based on our legitimate interest. Where the tick is your consent, you can take it back at any time; this does not undo what we did before. Write to butschster@gmail.com from the address you applied with. You can also complain to the Personal Data Protection Service of Georgia (personaldata.ge), or, if you live in the EU, the data protection authority of your country.
Age
harnsy keys are not for people under 16. Do not apply if you are younger.
Do Not Track
The application form and status page do not track you across other sites. Analytics runs only if you accept it in the cookie bar; we do not otherwise act on browser “Do Not Track” signals.
Changes
We keep the version you agreed to. If we change how we use your data in a way that matters, we say so on this page with a new date and, where the law requires, ask again.