Privacy policy

Last updated .

We keep as little about you as we can, and only for as long as we need it. This page explains what we keep and why. Questions, or want to use any of your rights? Email [email protected].

1. Who is responsible

Martin Svedén (trading as Tonfors, Sweden) is the controller of your personal data under the EU General Data Protection Regulation (GDPR). You can reach us at [email protected].

2. Free plugins

To get a free plugin you give us your email address and, if you like, your name. We use them to email you a personal download link. When you download from that link, we note which plugin and system you downloaded and when. That confirms your address is really yours, shows us which plugins are used, and lets us help you if a download goes wrong.

Legal basis: sending the link is what you asked for (Article 6(1)(b)). The download record is based on our legitimate interest in knowing which plugins people use and supporting them (Article 6(1)(f)).

3. News about new plugins and updates

You can sign up for news on its own with our newsletter form, which asks only for your email address, or by ticking the news box when you get a free plugin. Either way, we only email you news once you confirm with the link we send you. We store when you agreed and the exact wording you agreed to. Every news email has a link to unsubscribe with one click, and you can also just write to us.

Legal basis: your consent (Article 6(1)(a)), which you can withdraw at any time.

4. Purchases and licenses

When you buy a plugin we keep your name, email address, the plugin and the license number, so we can send your license again when you ask on the My Licenses page. Payment details are handled by Stripe and never reach us. Downloads of paid plugins from their pages are only counted, without anything about who downloaded.

Legal basis: delivering what you bought (Article 6(1)(b)), and the bookkeeping the law requires (Article 6(1)(c)).

5. Who else handles it

We don’t sell your data or share it with advertisers. These services handle it for us:

  • Cloudflare hosts this website, the database and the download files. The database and files are kept in the EU.
  • Resend sends our emails. It is based in the United States and handles data under the EU’s standard contractual clauses.
  • Stripe takes payments. It sells the plugins to you as the merchant of record, so it is responsible for the payment data under its own privacy policy.
  • Google runs the mailbox that receives the emails you send us.

6. How long we keep it

  • If you never use the download link or confirm your newsletter signup, your address is deleted automatically after 30 days.
  • While you get our news, we keep your signup and download record. You can ask us to delete it at any time.
  • If you signed up for the newsletter only and unsubscribe, your address is deleted 30 days later.
  • If you don’t get our news, or unsubscribe, your signup and download record is deleted three years after your last download.
  • License records are kept for as long as you might need your license again, and at least as long as bookkeeping law requires.

7. Your rights

You can ask to see the data we have about you, get a copy of it, have it corrected or deleted, or object to how we use it. Email [email protected] and we’ll reply within a month. If you think we’re handling your data wrongly, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) or the data protection authority where you live.

8. Cookies and tracking

This website sets no cookies, has no analytics and loads nothing from other websites. Cloudflare processes your IP address to deliver and protect the site. Our forms keep IP addresses for at most two days, to stop abuse.

Some pages show a video from YouTube. Nothing is loaded from YouTube until you click play. Then the video plays from youtube-nocookie.com, and YouTube (Google) receives your IP address and may store data in your browser under its own privacy policy.

9. Changes

If we change how we handle your data, we’ll update this page and the date at the top.