Privacy

Privacy Policy

Your files stay yours. Here's exactly what we do and don't collect.

Last updated: August 22, 2026

Cinder Recovery is built so that your files stay yours. Here's what we do and don't collect, in plain language.

The desktop app

The app works entirely on your computer. Scanning, previewing, and recovering all happen locally:

  • Your files never leave your machine. There's no cloud component; results, previews, and recovered files are processed and stored locally only.
  • No telemetry or analytics. The app doesn't report usage, crashes, or file information to us or anyone else.
  • License activation is offline. Your key is validated and stored on your machine. No activation server is contacted.

The website and checkout

  • Payments are handled by Stripe. We never see or store your card number.
  • What we keep after a purchase: your email, the license key we issued, and the purchase reference — so we can re-send lost keys and provide support.
  • Contact form: if you message us, we receive the name, email, and message you provide, and use them only to reply.
  • Page-view counts. We log the page path you visited, the website that referred you, a country code, and whether you're on Mac or Windows. We do not log your IP address, set an analytics cookie, or use any third-party analytics product — which is why you don't see a cookie banner here.

Third parties that see something

Being specific about this, because a policy that says "we collect nothing" and then loads four external services isn't honest:

  • Stripe — processes payments and receives your email and payment details directly. See Stripe's own privacy policy.
  • Supabase — hosts our database of licenses and accounts, on our behalf.
  • Cloudflare — serves this site and sets a single security cookie (__cf_bm) to distinguish people from bots.
  • Google Fonts — the two typefaces on this site load from Google's servers, which means Google sees the IP address of your browser when a page loads.
  • Google Translate — only if you pick a language from the switcher in the header. Doing so sets a googtrans cookie in your browser and sends the page text to Google for translation. Leave it on English and neither happens.

How long we keep things

License and purchase records are kept for as long as the license is valid plus seven years, because tax rules require it. Page-view counts are kept for 24 months. Contact-form messages are kept for 24 months after we've answered them.

Your rights

Wherever you live, you can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. If you're in the UK, EU, or EEA, the GDPR gives you those rights explicitly, along with the right to object to processing and to complain to your national data protection authority. If you're in California, the CCPA/CPRA gives you equivalent rights, and we do not sell or share personal information as those laws define it.

Our lawful basis for the purchase records is performance of a contract; for support messages and page-view counts it's our legitimate interest in running and improving the site.

To exercise any of this, email support@cinderdatarecovery.com. We'll respond within 30 days, and we won't ask you to justify the request.

Who we are

Cinder Data Recovery is the data controller for this site. Reach us at support@cinderdatarecovery.com.

Note for the site owner: replace this section with your registered legal entity name and postal address before you take significant EU traffic — GDPR Article 13 requires the controller's identity and contact details, and Stripe's terms expect a real business address on the site too.

Changes

If this policy changes, the date above changes with it.