Privacy Policy

Last updated: 2 July 2026.

The short version: your family data never leaves your computer, this website sets no cookies, and we store the minimum needed to make a license key work. Data controller: the developer of StemmaFiles, contact@stemmafiles.com.

The app

Everything you enter — people, dates, places, photos, sources — is stored as plain files on your own disk. The app sends no telemetry and works fully offline. Two optional features talk to the internet, both off by default and clearly marked:

  • Online place lookup (opt-in) sends the place name you're searching to the OpenStreetMap Nominatim / Photon geocoding services. No personal data, no identifiers — just the place name.
  • License activation sends your license key, the app name, and a random per-machine identifier (a UUID the app makes up on first run — not a hardware fingerprint) to our license server. See below.

Crash logs, if the app ever writes them, stay in a local folder on your machine and are only shared if you email them to us yourself.

Buying

Checkout is operated by Paddle (Paddle.com Market Limited) as merchant of record. Paddle processes the personal data needed for the purchase — name, email, payment details, country — as an independent controller, described in Paddle's privacy policy. We do not see or store your payment details.

The license server

To activate and validate license keys we run a small server that stores, per license: the key, the product it's for, its status, the Paddle subscription reference, activation timestamps, and the random device identifiers described above. That's all — it exists solely so your key works and a refunded key stops working. It's hosted on Cloudflare's EU-capable infrastructure and the data is kept for as long as the license exists, plus what bookkeeping law requires.

This website

Static files, served by Cloudflare. No cookies, no analytics, no tracking pixels. Cloudflare keeps standard, short-lived technical logs (IP, request) to run and protect the service. Email to contact@stemmafiles.com is routed via Cloudflare Email Routing to our mailbox.

Your rights

Under the GDPR you can ask us for access to, correction of, or deletion of the data above, or complain to a supervisory authority (in Poland: the President of the Personal Data Protection Office, UODO). Deleting license data deactivates the license. One honest note: for your family research data we can't help or hinder — it's on your disk, we never had it.

See also: Terms of service · Refund policy