What we process and why
For the waitlist, we store your email address and sign-up time to send the Mac launch and Android beta notices, separately from purchase, license, refund and support emails.
You enter card and billing details directly on Stripe's checkout page, where Stripe collects them under its own privacy policy; we never receive card numbers. For USD, EUR and GBP purchases, Link (Stripe) is the seller. We use the checkout email, checkout and payment IDs, payment status, currency, amount and payment link from Stripe to confirm purchases and issue licenses; we do not keep other fields Stripe sends.
The license service receives your device identifier and license key or authentication token. It stores license, device, activation and payment-block records, including identifiers, status and dates, for activation, device limits, refunds and abuse prevention.
The desktop app stores license state on your device: a random installation ID not derived from hardware, trial and check dates, an activation ID, an access token and the signed device license file. After activation, the app contacts the license server at startup and roughly every 6 hours while running, sending the installation ID, token and activation ID, with retries after failures; checks stop after deactivation or removal from the active devices. Deleting the app's license data removes this state locally.
The app keeps size-capped crash and performance logs on your device for troubleshooting; they are never uploaded automatically. You may copy a report and send it to support if you choose.
Access data such as IP addresses is used to deliver the site and prevent abuse. We use your email address and message to respond to support, refund and privacy requests.
Service providers
We use Cloudflare (U.S.) to host this site and the license service and store waitlist, analytics and license records. We entrust license email delivery to Resend (U.S.), providing the checkout email address, license key and delivery identifier. Transfers to Resend rely on an equivalent protection system under Japan's privacy law, secured through its data-processing agreement (DPA). Information about these measures and how their continued implementation is ensured is available on request.
Support email is handled by an email provider and may be processed outside Japan. We do not sell your data.
Security
Technical safeguards: the site redirects HTTP requests to HTTPS. The license database stores only hashes of license keys and authentication tokens.
Foreign processing environment: data is processed in the United States and other countries where providers operate. See the PPC's information on the U.S. data-protection system. Contact us for more detail about safeguards.
Retention
Waitlist, license, activation and payment-block records have no automatic deletion. You may request deletion below; records needed for payment, legal obligations or abuse prevention may be retained. Expiry of purchase links or device license files does not delete these records. Analytics records expire after 60 days; waitlist IP rate-limit counters expire within about 2 hours of their last update. Cloudflare logs are retained for up to 7 days. Stripe and Resend retain their records under their own policies.
Browser preferences and analytics
We use no analytics or advertising cookies or third-party analytics service. Your browser stores your language preference until you clear it. The purchase-complete page keeps the checkout session ID in its browser history entry for reloads and clears it when it detects suspension, expiry or invalidation. To understand site usage, our analytics stores the page path without query parameters, language, referring site's hostname and timestamp, without IP addresses or device identifiers. Provider logs are separate. Stripe checkout may use cookies under Stripe's privacy policy.
Your requests and contact
For questions, complaints or requests under Japan's privacy law, write to support@artlia.app. As provided by law, you may request notification of purposes of use, disclosure of retained personal data or third-party transfer records, correction, addition, deletion, or cessation of use or third-party transfers. Requests are free of charge.
Specify the records, action and preferred response method. Use your registered or checkout email address where possible; we verify identity or a representative's authority as necessary. We respond without delay as required by law and explain refusals or necessary retention. The operator's name and address are also available without delay on request, as stated in the commercial disclosure (Japanese).
Changes
We publish revisions here with the update date and notify or publish changes to purposes of use as required by law.
Last updated: 2026-10-18