Privacy policy

The data controller is Samuel Lovati (NatPlanet90), France — see the Legal notice. For any question or request about your data: tokensaver.support@gmail.com.

TokenSaver builds the map of your project on your own computer and keeps it there, protected at rest. Your source code and the map are not sent to us.

• Website visits and downloads: shortened IP address (the last part is removed), page or version, browser type, country. Purpose: simple audience statistics and abuse prevention. Legal basis: legitimate interest. Kept 13 months. No cookies are used.
• Contact form: name, email address, message, shortened IP address. Purpose: answering you. Legal basis: legitimate interest. Kept 3 years. This is the only place where we ask for an email: accounts don't have one.
• Account: account name (private, used only to sign in), password and recovery code (stored only as secure hashes: we can never read them), public nickname, plan and usage time. No email address. A copy of your recovery code stays only on your computer, encrypted with your password, so you can see it again in the app: we never receive it. Purpose: providing the software and the license. Legal basis: contract. Kept while the account exists.
• Registered computers: technical identifier of the computer, computer name, last activity, counts of files created/modified/deleted (counts only, never file names or content), and a public key the app creates on your computer to prove it is really yours (the private part never leaves it). Purpose: license per computer and account security. Legal basis: contract. Kept while the account exists. License moves between computers: kept 12 months.
• Free trial per computer: which account first used the free trial on a computer. Purpose: one free trial per computer. Legal basis: legitimate interest. Kept 3 years; if you delete your account it no longer points to you.
• Connection history: IP address and country seen by the license server for each computer. Purpose: account security (shared or stolen accounts). Legal basis: legitimate interest. Kept 12 months.
• Support messages and feedback: what you write to us. Feedback you choose to publish is shown on this site with your nickname only. Kept while the account exists; published feedback stays, with your nickname only, if you delete your account.
• What TokenSaver is missing: short notes the AIs connected to the app write when TokenSaver lacks a tool for your project (for example a language or a kind of search). Before they leave your computer the app removes code, paths, file and project names, web addresses, emails and long numbers, and our server cleans them again. You can read them in the app (Notebooks, What TokenSaver is missing) and turn sending off in Settings; we then receive only that it is off. Purpose: improve TokenSaver. Legal basis: legitimate interest (you can object at any time with the switch). Kept 12 months after the last time a note arrives, deleted with your account.
• Account recovery requests: if you ask us to recover an account, what you write, the computer asking, shortened IP address and country, the automatic checks and our decision. The owner of the account is warned in the app and can block the request. Purpose: recovering accounts safely and preventing account theft. Legal basis: contract and legitimate interest. Kept 12 months.
• Security notices: notices shown in your app (for example "password changed" or "someone asked to recover your account"). Kept 12 months.
• Anti-abuse counters: a one-way fingerprint of your IP address (not the address itself), to limit new accounts, recovery attempts and requests from the same network. Kept 24 hours.
• Security log: actions made on your account (for example a license change). Kept 3 years.

Nobody else, and nothing is sold. The website and license server are self-hosted in France. Country information comes from a local database (IP Geolocation by DB-IP, CC BY 4.0): your IP address is not sent to any third party for this.

If you email us, your message is handled through Gmail (Google), which may process data outside the European Union under its own safeguards.

You can access, correct, delete or export your data, object to some uses and ask for a limitation. In the app, the Account page lets you download all your data and delete your account yourself. For anything else, write to tokensaver.support@gmail.com; we answer within one month.

You can also lodge a complaint with the French data protection authority, the CNIL (cnil.fr).

Connections use HTTPS, passwords are stored as hashes, licenses and updates are cryptographically signed, and the administration interface is not reachable from the internet.

If this policy changes, the new version is published here with its date.