Privacy policy.

1 Who is responsible

The data controller is [FILL IN: name or company], [FILL IN: address].

For data matters write to [FILL IN: e-mail address]. No data protection officer has been appointed.

2 What data and what for

We run no analytics, no profiling and no newsletter. There is no Google Analytics, no advertising pixel and no automated decision-making here.

3 Who receives the data

• Stripe Payments Europe, Ltd. (Ireland): payment handling. Stripe collects the card data; we never see it. Stripe is a separate controller of that data. For purchases from outside Poland the payment goes through the Stripe Managed Payments service: the sale and the VAT are then settled by Stripe (under the Link brand), which also sends the purchase confirmation.
• Cloudflare, Inc. (USA): hosting of the c-sdr.pl site and its functions, our licence server (license.c-sdr.pl) and their databases, stored in the EU. The licence database receives your e-mail address, name and the issued key, the transaction data for the sales ledger (date, amount, payment method, billing country and payment ID), plus the machine code, the program version number and the time at activation. The site's database receives the records of issued demo keys (e-mail address, IP address or machine code). No IP addresses are stored in the licence database; like any hosting provider, Cloudflare processes the IP address of a connection to deliver the answer, protect the server and keep out connections from outside the European Union. Cloudflare also runs the DNS of the c-sdr.pl domain.
• Cloudflare Turnstile (Cloudflare, Inc., USA): the “I am not a robot” check in the contact form. The Turnstile script loads only once you start filling in the form; until then your browser does not connect to challenges.cloudflare.com. After that, Cloudflare receives technical data about the connection and the browser (including the IP address and the User-Agent header) and uses it to tell a human from a robot and, as a separate controller, to improve that mechanism, but not to identify or profile people. Legal basis: Art. 6(1)(f), i.e. protecting the form from spam.
• Resend (USA): sending the message with the key and the messages about new versions, and delivering contact-form messages to us. It receives the e-mail address and the message.
• Installer download (pobierz.c-sdr.pl): the file is kept in Cloudflare R2 storage and sent by the same server as the licences. So that one connection cannot download the file endlessly, the server keeps, for one day, a one-way hash of your IP address together with the number of downloads, but never the address itself. The previous day's hashes are deleted automatically every night. The site loads nothing from Google servers: the typefaces are served from our own.
• YouTube (Google Ireland Limited, Ireland), the one exception to the rule that the site loads nothing from Google servers: the video in the Gallery. The player is loaded only when you click the video, and in YouTube's privacy-enhanced mode (youtube-nocookie.com); until then your browser does not connect to YouTube at all. Once you click, Google receives, among other things, your IP address, browser data and the address of the page you are watching on, and may store its own data in your browser (cookies, local storage), under the Google privacy policy. Instead, you can open the video directly on YouTube with the button under the player.
• Competent authorities, where disclosure is required by law.

This list covers the website, the shop and the licence server. Apart from that, the program installed on your computer contacts other services, listed in point 8, and does so on your instruction and on your behalf. We do not stand between you and those connections and receive no data from them.

We do not sell data and do not pass it on for marketing.

4 Data outside Europe

Some providers process data in the United States. Transfers rely on the standard contractual clauses approved by the European Commission or on the adequacy decision under the EU–US Data Privacy Framework. You can request a copy of the safeguards at our contact address.

The same applies to the services the program itself contacts. CelesTrak, the U.S. Geological Survey and NOAA are American services, and where the map provider you chose processes data follows from their own privacy policy, not from ours.

5 How long we keep data

• Accounting data: 5 years from the end of the year in which the tax payment fell due.
• Licence data and activation history (key, machine codes, times of activations and checks): for the validity of the key and as long as needed to handle complaints.
• Demo key records (e-mail address, IP address or machine code): as long as the one-demo-per-device limit applies.
• Technical logs of the site and the licence server: at Cloudflare, a few days at most.
• The address for messages about new versions: until you opt out, and at most until the end of the period in which the Seller releases updates for your licence (with a demo key: until you withdraw consent). The acknowledgement from the purchase (with its date) is stored with the order in Stripe and with the key on the licence server, and the consent for a demo in the site's database.
• Correspondence, including contact-form messages: until the matter is closed and the limitation periods expire. The site does not store contact-form messages in its database: they go only to our mailbox.
• The map tile cache and downloaded orbits: these sit on your disk alone and you remove them yourself by clearing the program’s data folder.

6 Your rights

You have the right to access your data, to rectify it, to erase it, to restrict processing, to data portability and to object to processing based on our legitimate interest.

Send your request to the contact address in point 1. We reply within one month.

You can opt out of messages about new versions at any time, by replying to such a message or writing to the address in point 1. Consent given with a demo key can be withdrawn the same way; this does not affect the lawfulness of messages sent before.

You may also lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland.

Erasure is not always possible straight away: invoice and accounting data must be kept for as long as tax law requires.

7 Cookies and browser storage

The site uses no tracking cookies. It stores only two settings that you choose yourself in the browser's local storage: the site language and the program version whose description you are viewing (the v1/v2 switch at the top of the page), so that your next visit looks the same. These entries stay on your device and reach neither us nor anyone else.

Stripe may set its own cookies on its payment page. They are described in Stripe's privacy policy.

You can remove the language and program version entries by clearing the site data in your browser.

The site counts visits and downloads. Only the fact that an event happened reaches the server, and only numbers are stored, with no IP address and no identifier that could single you out. So that refreshing the page does not inflate the counter, the date of the last count is kept in local storage. It is removed the same way.

8 The program itself

The program works offline and reaches the network only in the situations listed below. Nearly all of them take an action of yours. Two happen by themselves: once every seven days, at start-up, the licence check is repeated, and once you have opened the Propagation page in the 2.0 look, the program fetches NOAA data in the background (described below).

• Speech transcription and translation run entirely on your computer. Audio, text and translations are not sent anywhere.
• At activation the program contacts our licence server (license.c-sdr.pl) and passes the licence key, the machine code and the program's version number. The machine code is a one-way hash of the computer name and the system volume serial number; neither can be recovered from it. Nothing else leaves: not the frequency, not what the program decoded, not your position. That same check later repeats on its own, in the background: at start-up, if seven days have passed since the previous one. What goes out then is exactly the same: the key, the machine code and the version number. Between those checks the program works without a network.
• The map downloads tiles from the provider whose key you entered yourself, so your IP address reaches that provider, on their terms. Until you switch online tiles on, the program asks no map server for anything. Tiles once downloaded stay in a cache on your disk so the map works offline; we never upload them anywhere.
• Address search uses OpenStreetMap’s Nominatim service, and only when you press the search button. What is sent is the typed text alone, with no position and no identifiers.
• Satellite orbits are fetched from CelesTrak when you press the button, and stay on your disk. There is also an “Update automatically (once a day)” switch, off by default; with it on, the program asks CelesTrak once a day. The program asks for three short lists only, never the whole catalogue, and refuses to ask again for two hours.
• The Propagation page (2.0 look only) uses data from NOAA, a U.S. government agency. The program first contacts NOAA when you open that page; from then on it fetches the data by itself, in the background, at every start-up and afterwards no more often than NOAA updates it, so the forecast is current. Space weather comes from NOAA SWPC (services.swpc.noaa.gov): only the request with the program’s name and your IP address go out, with no position and no identifiers. When you open the VHF / UHF tab, for the next 6 hours the program also fetches a GFS model forecast for the area around your station from NOAA’s NOMADS server (nomads.ncep.noaa.gov). The limits of that area are in the request address, and the station coordinates set in the program can be worked out from them, so NOAA receives them together with your IP address. All of these downloads are turned off by the “Fetch NOAA space weather” switch on the Station tab. The fetched data stays in the program’s data folder.
• Two U.S. Geological Survey sources (the aerial imagery and the topographic maps) are the only ones that need no key; they cover the United States only. Using them connects you to that agency’s server.
• The speech recognition model is built into the program and nothing has to be downloaded for it to work. If you choose a larger model yourself, the program fetches it from its provider’s server, and your IP address reaches that server.
• Translation packs for the languages shipped with the program are embedded in it. When you add another language, its pack is downloaded from Hugging Face, and your IP address reaches them.
• The SDR page has buttons that fetch drivers from their publishers: from GitHub (RTL-SDR Blog, Nuand, Analog Devices) and from the Zadig site. The program contacts them only once you press the button, and your IP address then reaches those services, on their terms.
• A demo key can be requested from inside the program, with the button on the activation screen. What goes to our server at c-sdr.pl is the machine code alone; the server records it with your IP address so that one computer gets one trial key. The key comes straight back to the program and is activated like any other. The program sends no e-mail address for this.
• Logs, the logbook and settings are saved only on your disk, in the %APPDATA%\C-SDR folder.

Apart from licence activation and demo requests, which come to us, none of these connections passes through us. We do not see them, do not stand between you and them, and receive no data from them. The terms of those services bind you to their providers, just as the map keys you open on your own account do.

9 Changes

If we change this policy, the new version will appear on this page with a new date. The Polish version is the binding one.