Privacy policy
Last updated 22 July 2026
We sell software, not attention. This page describes exactly what the website and our software record, why, and for how long — in the same plain language we use internally.
Legal contact: support@rnbr-dev.com.
Who to contact
Write to support@rnbr-dev.com about anything on this page, including requests to see or delete your data. That mailbox receives but does not send, so replies arrive from reina.dev.rnbr@protonmail.com — you can write to either.
What we collect, and why
Your account
Creating an account stores your email address, a cryptographic hash of your password (never the password itself), and the date you registered. We need the address to confirm the account, to send password resets, and to deliver licence keys you buy.
Signing in with Google or GitHub
If you use a provider, we store the account identifier and email address that provider reports, plus the access token it issues so the connection keeps working. We ask for the minimum scopes needed to read your email address, and we only accept an address the provider has verified. We never receive your password with these providers.
Security records
Sign-ins, failed sign-ins, registrations, confirmations and password resets are recorded so we can spot someone attacking accounts. Each record holds the event, the email address it concerned, the browser's user-agent string, and a salted hash of the network address — never the address itself. The hash tells us "these attempts came from one source" without us keeping where. These records are deleted after 12 months.
Website analytics
We run Rybbit on our own server. It is cookieless, stores no network addresses, and cannot follow you to other websites. It tells us which pages get read and roughly which country readers are in. Nothing is shared with an advertising network, because we do not use one.
Licence checks from the software
When our software verifies a licence key, we count how many times that key was checked today and nothing else. There is no device identifier, no hardware fingerprint and no network address stored against a key. This is deliberate: it is why our licences are not tied to a device, and why a key works on your phone and your spare phone without asking us.
Payments
Payments are handled by an external payment processor. We keep the order — what was bought, the price, and whether it was paid — and the licence key issued for it. We never see or store card numbers, wallet credentials or seed phrases; those stay with the processor, under its own privacy policy.
What we deliberately do not do
- No advertising or third-party tracking scripts, anywhere on this site.
- No selling, renting or sharing of personal data. There is no such business here.
- No profiling, and no automated decisions that affect you.
- No storing of your network address against your account or your licence key.
- No device binding, so nothing identifies your hardware to us.
Cookies
One cookie, set only after you sign in, holding your session. It is httpOnly (unreadable by scripts), Secure (sent only over HTTPS) and SameSite=Lax. It is strictly necessary to keep you signed in, so there is no consent banner to click — we have nothing else to ask you about. Signing out clears it.
Who else handles your data
| WHO | WHAT THEY GET | WHY |
|---|---|---|
| Resend | Your email address and the message | Delivering confirmation, password-reset and licence emails |
| Google / GitHub | Only what you authorise at their consent screen | Optional sign-in, if you choose it |
| Payment processor | Payment details you enter with them | Taking payment for a licence |
Everything else — the website, the account database and the licence service — runs on servers we operate ourselves.
How long we keep things
- Account data — until you ask us to delete the account.
- Security records — 12 months, then deleted automatically.
- Orders and licences — kept while the licence is valid, and afterwards where record-keeping or tax rules require it.
- Analytics — aggregate figures only; nothing tied to a person.
Your rights
You can ask for a copy of what we hold, correct it, or have it deleted; you can withdraw consent for optional processing; and you can complain to your national data-protection authority. Email support@rnbr-dev.com and we will act on it. Deleting your account removes your profile and unlinks any connected providers — we will tell you plainly if something must be retained, and why.
Changes
If this policy changes in a way that matters, we will update the date at the top and, for anything significant, email account holders rather than quietly editing the page.