1. Data Controller Information
1218.io ("we", "us", or "our") is dedicated to protecting your privacy. This Privacy Policy describes how we collect, use, store, and disclose personal data when you visit 1218.io or use our software applications (including Seer, PinStack, and Snapdown).
We adhere to data minimization and local-first principles. We collect only information necessary to deliver software licenses, verify seat allocations, and provide technical maintenance:
- Order & License Details: When you purchase a license, we collect your email address for license delivery, order ID, purchased SKU/tier, and transaction timestamp.
- Software Activation & Seat Verification Requests: To support license activation and device limits, when you enter a license key in the client, the Software initiates an HTTPS request to our licensing server. This request transmits your IP address, license key, software version number, and a hashed or otherwise pseudonymous device identifier based on selected device information. This identifier is used for licensing and abuse prevention and is not used by us to identify you personally beyond what is necessary for those purposes.
- Software Update Checks: When the Software periodically or manually checks for updates, it transmits a lightweight query to our update server. This request conveys only the client version number and system architecture (e.g., x64, ARM64) to retrieve release metadata. It transmits zero personal identifiers or device hardware signatures.
- Customer Inquiries: Communication records, diagnostics, or crash logs you voluntarily send to our support desk.
- Standard Web Server & Network Logs: IP address, user agent, requested URLs, and timestamps recorded automatically for cybersecurity and defense against abuse.
3. How We Use Information & Legal Bases
4. Third-Party Data Sharing, Transfers & Service Providers
We do not sell your personal data. We share data only with trusted service providers under applicable service agreements and data processing terms:
- Payment Processing Partner (Merchant of Record):
To facilitate secure payment processing globally, customer transactions are managed by Waffo Pancake. According to Waffo Pancake's public compliance statements, its processing infrastructure is certified PCI-DSS Level 1 compliant. Payment credentials are submitted directly to Waffo Pancake. 1218.io does not collect, receive, process, or store full credit or debit card numbers or CVV codes on our servers.
- Cloud Infrastructure & Cross-Border Transfers:
Our primary license verification and content distribution servers are hosted in Japan (and global nodes provided by reputable cloud hosts including DigitalOcean). When users in the European Union, China, or other jurisdictions access our website or activate the Software, network traffic is transferred cross-border to these servers. Infrastructure providers operate under data processing agreements and terms of service that ensure secure transit.
- Legal Requirements:
We may disclose information if required to do so by applicable laws, valid court orders, subpoenas, or lawful government requests.
- Business Transfers:
In the event of a merger, acquisition, or asset reorganization, customer records would transfer subject to the continuity of this Privacy Policy.
5. Your Data Rights & Deletion Scope
Under applicable data privacy frameworks (including the GDPR where applicable), you enjoy legal rights concerning your personal information:
Scope of Data Deletion
Where required by applicable law, you may request deletion of personal information that we control, subject to legal, accounting, security, fraud-prevention, dispute-resolution, and other legitimate retention requirements. Information retained by our independent service providers or Merchant of Record may be subject to their own privacy policies and legal retention obligations.
How to Submit a Data Request
To exercise any of your privacy rights, send an email to cc.seer@gmail.com with the subject line "Privacy Data Request - [Request Type]" from your purchase email. Response Timeline: We will respond within the time required by applicable law, including any permitted extensions.
6. Data Security & Retention Periods
- Encryption in Transit: All website and software activation interactions are encrypted using HTTPS and TLS 1.3 standards.
- Pseudonymization: Device identifiers are processed via one-way cryptographic hashing to isolate licensing records from physical identity.
- Definite Retention Periods:
- Server Access Logs: Standard network and cybersecurity access logs are retained for up to 180 days, after which they are automatically rotated and overwritten;
- License & Activation Records: Retained for the active lifecycle of your license (to enable key recovery and device re-activations), erased or irreversibly anonymized upon validated deletion request within statutory timeframes;
- Support Correspondence: Retained for up to 2 years following ticket resolution for historical service auditing.
7. Product-Specific Privacy & Plugin Boundaries
Our applications are crafted for power users who value privacy, speed, and discretion:
- Seer (Windows Quick Look Utility): Seer is designed as a local-first desktop application. Files selected for preview are processed locally on your device, and 1218.io does not intentionally upload the contents of files you preview to servers operated by 1218.io. Certain file formats, third-party plugins, or external resources may have their own network behavior. Such behavior is governed by the applicable software or service documentation and terms.
- PinStack (Windows Clipboard Manager): Designed for local workstation productivity. The official native client does not contain any code designed to upload clipboard data or track user activity. Clipboard history remains stored in your local drive database.
- Snapdown (Markdown to Image Studio): Built as a client-first web app that runs in your browser sandbox. Markdown text and exported graphics are rendered client-side; no cloud sync or server uploads of document contents exist by design.
- Official vs. Third-Party Plugin Boundary: Our local-first and zero-upload privacy commitments strictly apply to the official native client of Seer and official plugins developed, signed, and distributed by 1218.io. If you choose to install or enable unofficial third-party plugins created by independent authors, such components may contain independent networking or data processing code. Data handling by third-party plugins is not controlled or governed by 1218.io, and privacy liability rests entirely with the respective plugin developers. We strongly advise inspecting plugin source code and privacy statements before installation.
- Microsoft Store Edition: If you download or purchase the Software via the Microsoft Store, installation delivery, store telemetry, and application crash dump reports are collected and processed independently by Microsoft Corporation under the Microsoft Privacy Statement. Store purchases and refunds are governed exclusively by Microsoft terms.
8. Jurisdiction-Specific Provisions (GDPR & China PIPL)
- European Economic Area (EEA / GDPR): If you reside in the EEA, pursuant to Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority in the Member State of your habitual residence, place of work, or place of alleged infringement.
- Personal Information Protection Law of the PRC (PIPL): For users located in mainland China, personal information processing adheres to data minimization and is carried out strictly as necessary for contract performance (license issuance and activation). Users enjoy statutory rights of access, correction, and deletion under the PIPL, exercisable via our official contact email.
9. Children's Privacy
Our products and services are not directed to children under 18 years of age. We do not knowingly collect personal data from minors. Minors under 18 may only use the Software under the supervision and with the consent of a parent or legal guardian. If you become aware that a minor has provided us with personal information without parental consent, please contact us immediately to have the data removed.
10. Changes to this Policy & Significant Notice
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated timestamp. In the event of material modifications that significantly affect your data rights, we will notify registered users via their purchase email address and maintain an archive of previous versions. Continued use of our website or software after updates constitutes acceptance of the revised policy.
If you have any questions, comments, or concerns regarding this Privacy Policy or our data handling practices, please contact us:
1218.io