Privacy Policy

Last Updated: December 2025

This Privacy Policy outlines the types of personal information we collect, use, and disclose when you visit or interact with our website, as well as the steps we take to protect your personal information.

By using our website, you agree to the collection and use of information in accordance with this policy.

1. Information Collection and Use

We collect personal information that you voluntarily provide when using our website, such as your name, email address, and any other information you choose to share when contacting us or registering for our services. We use this information to respond to your inquiries, provide services, and improve our website.

We may also collect non-personal information, such as your IP address, browser type, and other technical data, to help us understand how visitors use our website and optimize their experience.

2. The C⎕ extension and licence activation

When the C⎕ extension starts and finds a valid licence, it sends us three things: your licence token, a machine fingerprint, and the extension version. Our server also records the IP address the request came from, the user-agent string, and the time.

What the machine fingerprint is. A 64-character SHA-256 hash, computed on your own computer from four values: a stable machine identifier (on Linux the system’s machine-id; where none exists, the hardware address of your primary network adapter), your computer’s hostname, your operating system’s name, and its processor architecture. Those values are combined and hashed before they leave your machine. We receive only the hash. We never receive the underlying hardware address, hostname or machine identifier.

Why we collect it. A licence is issued for one machine. The fingerprint lets us confirm a licence is being used on the machine it was issued for, and lets us see when one licence is activated on many machines. Per-seat licensing is not possible without it.

What it is not. It identifies an installation, not a person. We do not use it for advertising or profiling, we do not combine it with data from other sources, and we do not sell or share it. We never see your source, your designs, or the hardware you generate.

Turning it off. This startup ping is controlled by the neosyn.cg.distribution.activate setting, which you can switch off at any time. Your licence keeps working: it is verified locally on your own machine, and the ping is a separate audit message. The daily version check is separate again, under neosyn.cg.distribution.checkUpdates.

How long we keep it. Activation records are deleted automatically once they are 90 days old, and we will erase them sooner on request.

3. Cookies and analytics

We set one cookie, and only after you sign in: a session cookie that keeps you logged in. It is strictly necessary for the site to work and is removed when you sign out.

Our analytics are cookieless. We use Umami, self-hosted on our own server in Germany - your visit is never shared with an analytics company. It records the page visited, the referring site, and coarse technical details (browser, operating system, country). It does not set cookies, does not follow you across other websites, and does not build a profile of you.

We do not use advertising trackers, and we do not sell or share your data.

4. Third-party services

We keep these to a minimum, and name them rather than describing them vaguely:

  • Stripe - payments and subscriptions. Card details go directly to Stripe; we never see or store them.
  • Purelymail - transactional email (account verification, contact replies).
  • Resend - our newsletter, only if you subscribe. Every message carries a one-click unsubscribe link.

Each receives only what it needs to do its job, and none may use it for any other purpose. Our analytics are not on this list because they run on our own infrastructure.

5. Security

The security of your personal information is important to us, but remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

6. Links to Other Websites

Our website may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

7. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

8. Contact Us

If you have any questions or concerns about our Privacy Policy, please contact us by email at info@neosyn.io or through the contact form on our website.