LEGAL · UPDATED OCT 7, 2026

Privacy policy

What we collect, why, how long we keep it, and what we deliberately do not store.

What we collect

Data	Why	Kept for
Email address	Order confirmation, licence delivery, release notices	Until you delete your account
Billing name, country, company, tax ID	Invoicing and tax reporting	7 years, as tax law requires
Licence keys and activations	Enforcing seat limits, support lookups	Life of the licence
Download log (licence, version, time)	Rate limiting and abuse detection	12 months
Support messages	Answering the message	24 months

What we deliberately do not store

Card details. Payment happens on the provider's page. We never see a card number.
Raw IP addresses. IP addresses are hashed with a server-side salt before they are written anywhere. The hash is used for rate limiting and cannot be reversed to an address.
Raw machine identifiers. Activation fingerprints are hashed the same way.
Full licence keys in logs. Logs contain a masked form only.

Cookies and analytics

We do not run analytics, advertising trackers, or third-party pixels, and we do not sell data. The site sets two cookies, both needed for it to work: thinkra_session keeps you signed in, and thinkra_cart remembers your cart. Your light/dark theme choice and your best score in the homepage mini-game stay in your own browser's local storage and are never sent to us.

If we add analytics later, it will be off until you agree to it, and this page will be updated first.

Who processes data on our behalf

Heroku (hosting), Supabase (database and file storage), Brevo (transactional email: sign-in links, licence delivery). When direct purchases are open: Lemon Squeezy (merchant of record and payments) and Midtrans (Indonesian payment methods).

Each holds only what its job requires.

Your rights

You can delete your account from account settings. For a copy of your data, a correction, or any other request, write to studio@thinkrastudio.com or use the contact form. Deleting your account removes your profile, email address, and support history.

Records we must keep for tax purposes — invoices and their billing details — survive account deletion, because we are legally required to retain them.

Children

This site is for professional software developers. It is not directed at children and we do not knowingly collect their data.

Contact

Thinkra Studio is responsible for the data described here. Questions about this policy: studio@thinkrastudio.com.

Changes

Material changes will be announced by email to subscribers and dated at the top of this page.

What we collect

Data	Why	Kept for
Email address	Order confirmation, licence delivery, release notices	Until you delete your account
Billing name, country, company, tax ID	Invoicing and tax reporting	7 years, as tax law requires
Licence keys and activations	Enforcing seat limits, support lookups	Life of the licence
Download log (licence, version, time)	Rate limiting and abuse detection	12 months
Support messages	Answering the message	24 months

What we deliberately do not store

Card details. Payment happens on the provider's page. We never see a card number.

Raw IP addresses. IP addresses are hashed with a server-side salt before they are written anywhere. The hash is used for rate limiting and cannot be reversed to an address.

Raw machine identifiers. Activation fingerprints are hashed the same way.

Full licence keys in logs. Logs contain a masked form only.

Cookies and analytics

If we add analytics later, it will be off until you agree to it, and this page will be updated first.

Your rights

Records we must keep for tax purposes — invoices and their billing details — survive account deletion, because we are legally required to retain them.