← Back to PocketPress

Privacy Policy

Last updated: September 10, 2026

This Privacy Policy describes how PocketPress ("we", "us", "our") collects, uses, and protects your personal data when you use the PocketPress desktop application and related services (collectively, the "Service").

We are committed to protecting your privacy. This policy complies with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. What We Do NOT Collect

We do not collect:

• Video files, images, or audio content
• File names or file paths
• Video content, thumbnails, or previews
• Browsing history or internet activity
• Keystrokes or screen recordings
• Location data

2. What We Do Collect

We collect a minimal set of data necessary to operate the licensing and payment systems:

Data	Purpose	Legal Basis (GDPR)
Hardware Identifier (HWID)	A SHA-256 hash derived from your computer's hostname, username, and CPU model. Used to lock your license key to one device and prevent unauthorized sharing.	Legitimate interest (fraud prevention)
Email Address	Collected by Stripe during payment. Used to deliver your license key and send transactional emails (purchase confirmation, key delivery).	Contract performance
License Key & Status	Your unique activation key, its status (active/expired), and the timestamp of last verification.	Contract performance
Compression Count	Anonymous aggregate counter of how many compressions are performed (no details about the files). Used for internal analytics only.	Legitimate interest (service improvement)
Error Reports (optional)	If you opt in to send an error report after a crash, we may receive: error messages, FFmpeg exit codes, and optionally video metadata (codec, resolution, FPS — never the video itself). You choose what to include.	Consent

3. How We Use Your Data

• License verification: To confirm your subscription or lifetime license is valid and tied to your device.
• Fraud prevention: To detect and prevent unauthorized license sharing or key tampering.
• Transactional emails: To send your license key upon purchase (one-time, not marketing).
• Service improvement: To understand aggregate usage patterns (total compressions, error rates) and improve the product.
• Error diagnosis: If you opt in, to diagnose and fix software bugs.

We do not sell, rent, or trade your personal data to any third party. We do not use your data for advertising or marketing purposes.

4. Third-Party Services

We use the following third-party services, each with their own privacy policies:

Service	Purpose	Data Shared
Stripe	Payment processing	Email, payment details (handled entirely by Stripe — we never see your card number)
Google Firebase	Backend infrastructure (Cloud Functions, Firestore database, hosting)	HWID, license data, compression counts
Gmail (Google)	Transactional email delivery (license key emails)	Email address, license key

5. Data Storage & Security

• Your data is stored in Google Cloud (Firebase) infrastructure with encryption at rest and in transit.
• Direct database access is restricted — all read/write operations go through authenticated Cloud Functions only. No client-side database access is permitted.
• License verification responses are cryptographically signed (HMAC-SHA256) to prevent tampering.
• Your HWID is a one-way hash — we cannot reverse it to learn your computer name, username, or hardware details.

6. Data Retention

• Active subscriptions: Data retained for the duration of your subscription.
• Lifetime licenses: Data retained indefinitely (your license has no expiration).
• Cancelled subscriptions: Data retained for 30 days after cancellation, then automatically deleted. You may request earlier deletion at any time.
• Error reports: Retained for up to 12 months, then automatically purged.
• Aggregate statistics: Retained indefinitely (these are anonymous counters with no personal data).

7. Your Rights Under GDPR

If you are located in the European Economic Area (EEA), you have the following rights:

• Right of Access (Art. 15): Request a copy of all personal data we hold about you.
• Right to Rectification (Art. 16): Request correction of inaccurate data.
• Right to Erasure (Art. 17): Request deletion of your data ("right to be forgotten"). Note: deleting your data will deactivate your license.
• Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format.
• Right to Restrict Processing (Art. 18): Request that we limit how we use your data.
• Right to Object (Art. 21): Object to processing based on legitimate interest.
• Right to Withdraw Consent: Where processing is based on consent (e.g., error reports), you may withdraw consent at any time.
• Right to Lodge a Complaint (Art. 77): File a complaint with your local data protection authority. For Portugal: CNPD (www.cnpd.pt).

To exercise any of these rights, contact us at support@pocketpress.app. We will respond within one (1) month.

8. Cookies & Tracking

The PocketPress desktop application does not use cookies or web tracking technologies.

The PocketPress website (landing page, thank-you page) does not use tracking cookies, analytics scripts, or advertising pixels. No third-party trackers are loaded.

9. Minors' Privacy

PocketPress is not directed at minors under 13 years of age. We do not knowingly collect personal data from minors under 13. If you are between 13 and 16 and located in the EU, parental consent may be required for data processing.

If we learn that we have collected data from a minor under 13, we will promptly delete it. If you believe a minor has provided us with personal data, please contact us.

10. International Data Transfers

Your data may be processed in countries outside of the EEA (e.g., United States) through our use of Google Cloud and Stripe. These transfers are protected by:

• Standard Contractual Clauses (SCCs) approved by the European Commission.
• The service providers' own compliance frameworks (Google and Stripe both maintain GDPR compliance programs).

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect the most recent revision. Material changes will be communicated through the application or via email.

12. Contact & Data Protection

For privacy-related questions, data access requests, or to exercise your GDPR rights, contact us:

Email: support@pocketpress.app

You also have the right to file a complaint with the Portuguese data protection authority:

CNPD (Comissão Nacional de Proteção de Dados) — www.cnpd.pt