Privacy policy
A technical draft of the document. Seller and data controller details are not filled in — the owner supplies them. The owner must review and approve the text before public launch; for now it is not an offer.
Controller and scope
Data controller: [legal name, registration/tax number, address and request contact — to be supplied by the owner]. This document describes Tolmatch’s technical data flows; legal bases, retention periods and hosting location are approved before public launch.
Data used
Purchase email, licence status and dates, provider payment and saved method IDs, key HMAC, an encrypted recovery copy of the key, a hashed Mac identifier, activations, HMAC sign-in and session tokens, and check times. Tolmatch does not accept card details.
Translation and recognition
The text to translate is sent to the provider you choose — Google, DeepL, OpenAI, Claude — or to the Ollama server you configure. The licence server never receives translation text. Apple Vision recognises the selected area on your Mac. Offline translation depends on a local Ollama model; the other providers need internet.
Purposes
Issuing keys, checking access, managing Macs, restoring keys, processing payment and one-time sign-in. Sign-in links last 15 minutes and sessions 24 hours. Protection logs use HMAC identifiers; request bodies, keys and sign-in links are not logged.
Cookies and local storage
An HttpOnly, SameSite cookie stores a random account session identifier. The site language comes from the page address and is not stored anywhere. Licence keys and sign-in links are never written to browser storage. There are no analytics, advertising, trackers or third-party fonts.
Protection and retention
Recovery copies of keys and the mail queue are encrypted with separate keys kept outside the database. Deletion and backup retention periods, hosting the database in Russia, the controller and processors are for the owner to approve before public launch.
Your requests
For corrections, deletion and other requests write to support@tolmatch.app. Controller contacts, the procedure and mandatory response deadlines are approved by the owner before publication. Deleting records must not silently restore a used trial.