Data controller
Francisco Javier López de Haro, doing business as Dhaedalida Software ("we") and established in the Czech Republic, is the controller responsible for personal data processed in connection with dhaedalida.com and the Dhaedalida software under the EU General Data Protection Regulation (GDPR). For all privacy matters, write to info@dhaedalida.com: email is our contact channel.
The short version
This site sets no cookies, runs no tracking and no client-side analytics, stores nothing in your browser beyond your light/dark theme choice (kept on your device, never sent to us), and requires no account. The only personal data we process is what you choose to send us (through the contact form or by emailing us), the order details we receive from Paddle when you buy a license, the hashed email address the licensed software sends when it checks for updates, plus the ordinary technical data any web server processes to deliver pages. Our server keeps anonymous aggregate page counts that contain no personal data at all. The rest of this page spells that out.
Contact form and email
When you use the contact form we process the details you enter: your name, email address, chosen subject and message. Our server adds the IP address the submission came from and the country derived from it, for spam and abuse prevention and for context. The submission is delivered by email to our team mailboxes (sales@, billing@, support@ or info@ dhaedalida.com, depending on the subject). The same applies when you email us directly. The form contains a hidden "honeypot" field that exists only to catch automated spam bots: humans never see or fill it, and it carries no personal data.
Hosting, demo download and server logs
The site and the demo download are served by Cloudflare (Cloudflare Workers and R2 storage). Like any hosting provider, Cloudflare processes IP addresses and technical request data (logs) to deliver the site and to protect it against attacks and abuse; such data is retained per Cloudflare's policies. Downloading the demo requires no registration, so no personal data beyond those ordinary technical logs arises.
To understand which pages are read and where visitors come from, our server also counts page views, demo downloads and clicks on our buy links in aggregate: each count records only the page path, the country the request came from, the referring site's web address and, when you arrive through a link we published ourselves, a short campaign tag carried by that link. It never records your IP address, user agent or any identifier, nor anything that could link a count to you. These counts are statistics, not personal data, and involve nothing running in your browser.
Update check in the software
The licensed Dhaedalida application can check whether a newer build is available. When it does, it sends us two things and nothing else: a one-way hash (SHA-256) of the email address your license is registered to, and the version number you are running. We use them only to look up whether a newer build exists and whether your 12 months of updates still cover it, and to return a download link that stops working after an hour.
We record nothing when you check. The lookup writes no data: we do not log the check, do not count it, do not store when or how often you check, and build no usage profile. Ordinary technical request data (including your IP address) is processed by Cloudflare to deliver the response, exactly as for any other request to our servers, and is not linked to your license by us. Your license file itself never leaves your machine, and we never receive a machine or hardware identifier.
The check is a convenience, not a condition of use: you can turn it off in the software, and whether it runs, fails or is disabled makes no difference to your ability to use Dhaedalida. The free demo has no license file and does not check for updates at all.
Purchases and payment (Paddle)
When you buy a license, checkout runs on pages operated by Paddle (Paddle.com Market Ltd, UK, and Paddle.com Inc., US), which acts as our merchant of record and as an independent controller of the data it collects. Paddle processes the payment and billing details you enter at checkout under its own privacy policy; we never receive your card details. From Paddle we receive order details (your name, email address, country, the items bought and the amounts), which we use to deliver your license and to meet accounting obligations.
We keep a record of your license (your name, email address, edition and the date your 12 months of updates end) so that we can service it: send you new releases while your update period is running, let you know when it is about to end, and reissue your license file if you lose it. These are service messages about a license you own, not marketing, and there is no mailing list to join or leave. If you would rather not receive them, tell us at info@dhaedalida.com and we will stop.
Legal bases
We process contact data to handle sales and licensing inquiries you initiate (Art. 6(1)(b) GDPR, steps prior to entering a contract), and to answer other messages, keep the site secure (including spam and abuse prevention) and measure site usage through identifier-free aggregate counts (Art. 6(1)(f) GDPR, legitimate interests). We process order data to deliver purchased licenses, to service them afterwards (release and end-of-update notices, reissues), and the hashed email address sent by the software to determine update entitlement, because all three are how we provide what your license includes (Art. 6(1)(b) GDPR, performance of a contract). We retain purchase records where accounting and tax law requires it (Art. 6(1)(c) GDPR, legal obligation). We use no consent-based processing, because there are no cookies, no tracking and no marketing lists. We do not profile you, and none of the automated processing we carry out produces legal effects concerning you or similarly significantly affects you.
Recipients
Three service providers process data on our behalf: Cloudflare (site hosting, content delivery, download storage), Resend (delivery of contact-form submissions and order notifications by email) and Google (Google Workspace, our mailboxes). Purchases additionally involve Paddle, our merchant of record, which processes payment data as an independent controller rather than on our behalf. We share personal data with no one else, except where the law requires it.
International transfers
These providers, and Paddle, are US- or UK-based or may process data outside the European Economic Area. Where that happens, transfers are safeguarded by an EU adequacy decision (for the UK), the EU Standard Contractual Clauses and/or the EU–US Data Privacy Framework, where the provider is certified.
Retention
We keep correspondence for as long as needed to handle your inquiry and any business relationship that follows from it, then delete it. Correspondence that forms part of a purchase is kept for as long as accounting and other legal obligations require.
Your rights
Under the GDPR you can request access to, rectification or erasure of your personal data, restriction of processing and data portability, and you can object to processing based on legitimate interests. Write to info@dhaedalida.com. You also have the right to lodge a complaint with a data protection supervisory authority: you can contact the authority of the EU country in which you live or work, or any other competent supervisory authority.
Security
The site is served exclusively over TLS (HTTPS), we collect as little data as possible in the first place, and access to our mailboxes is limited to the operator.
Changes
We may update this policy, for example when the site gains new functionality. The version published on this page, with its "Last updated" date, is the one that applies.