Privacy Policy

1. Controller

LAYERS OF TIME STUDIO PTE. LTD., Zervex #08-03, 8 Ubi Road 2, Singapore 408538. Contact: hello@layersoftime.studio.

2. What we collect

Account: your e-mail address, sign-in times, and the one-time codes we send (stored only as a keyed hash until they expire).

Licence: a code derived from each activated computer (a hash of a system identifier, not the identifier itself), the computer's name as reported by its operating system, the app version, and when it last checked its licence.

Subscription: the identifiers Paddle gives us for your customer record and subscription, its status and dates. We never receive or store card numbers.

Contact form: what you type into it, sent to us by e-mail.

Site: Cloudflare, which hosts the site, keeps standard request logs. We run no analytics or advertising trackers.

3. Why

To run your account and licence (performance of the contract), to send sign-in codes and receipts, to meet tax and accounting duties, and to answer you when you write to us.

4. Who else sees it

Paddle (payments, tax, invoices; see Paddle's privacy policy), Resend (delivers our e-mails), Cloudflare (hosts the site and the account database). [DRAFT: confirm the list and the data-processing terms with each.]

5. How long

Account and licence records: while the account exists and for as long afterwards as tax law requires for the related transactions. Sign-in codes: 10 minutes. Sessions: 30 days (site) or until signed out.

6. Your rights

You can ask for a copy of your data, a correction, or deletion of your account by writing to the address above. [DRAFT: counsel to confirm the rights and the response period under Singapore's PDPA and, for EU/UK customers, the GDPR.]

7. Cookies

One cookie, lot_session, keeps you signed in on the account page. There are no advertising or analytics cookies. Paddle's checkout sets its own cookies when opened.