GuilderWorks Privacy Statement
Version 1.1 — effective 29 October 2026
In short
- Our software sends us nothing about you or how you use it. No telemetry, no usage statistics, no account, no activation server. The only contact, if you allow it, is a check for new versions that downloads a public list from our website.
- Our website sets no cookies of its own and uses no analytics or advertising trackers.
- We only receive personal data when you buy a license or contact us, and we use it only to deliver your license, help you and keep our records.
- We do not sell personal data or use it for advertising.
1. Who is responsible
GuilderWorks, a sole proprietorship established in the Netherlands (KvK 42195208), Jazzroute 49, 4337 XB Middelburg, is the controller for the processing described here. Questions and requests: privacy@guilderworks.com.
2. Our software
GuilderWorks software runs on your computer. It does not collect or transmit personal data, usage data or crash reports to us or to anyone else on our behalf.
- License check. Your license key is verified on your own computer. The software does not contact us to check it.
- What is stored on your computer. Your settings and the data you work with in the software, such as your notes, and for a paid product your license key and the date your trial started. This stays on your computer; we cannot see it.
- Connections. Where a product connects to other systems, it connects only to the systems you point it at, directly from your computer and not through us.
- Update check. The software asks on first run whether it may check for new versions. If you allow it, it downloads a public list of versions from our website and compares it on your computer. The request names only the product; it sends no license key, version number, settings or other data. Like any visit to our website, the request reaches Cloudflare and our web server with your IP address. Our web server keeps no log of update checks; Cloudflare handles them as described in section 3. You can switch the check off at any time.
If a product adds any other function that contacts us, we will say so in the product and on its page, and describe here what is sent, before it ships.
3. Our website
When you visit guilderworks.com, our web server records a log line for each request, except for update checks and downloads of our software, which it does not log.
| Data | IP address, date and time, page requested, browser type, referring page |
|---|---|
| Purpose | keeping the site secure and working, and solving faults |
| Legal basis | our legitimate interest in a secure, working website |
| Kept for | 14 days on our web server |
The site is delivered through Cloudflare, which handles the same request data on our behalf to deliver the site and protect it against attacks. Cloudflare keeps that data only as long as it needs it for those purposes; its data processing terms set no fixed period. We set no cookies. Cloudflare may set a strictly necessary security cookie when it checks suspicious traffic. We use no analytics, advertising or social media trackers, and fonts are served from our own server.
4. When you buy a license
Purchases are handled by our reseller, Paddle (Paddle.com Market Limited or the Paddle company named on your invoice), which is the seller of record: Paddle.com is the Merchant of Record for all our orders. Paddle processes your payment details under its own privacy policy and is itself responsible for that. We never receive your card or bank details.
The checkout itself is Paddle's: our buy and renewal pages load Paddle's checkout script from Paddle's servers, and your browser then talks to Paddle directly. Paddle's privacy policy covers that, including any cookies Paddle sets there. Our other pages load nothing from Paddle.
Before checkout, our website asks for the name the license is issued to. That name goes to our own server and, with the order, to Paddle. From Paddle we receive what we need to deliver your license:
| Data | licensee name, your name, company name and VAT number if given, email address, country, product, number of seats, order reference, amount and date |
|---|---|
| Purpose | issuing and reissuing your license key, support, and our business records |
| Legal basis | performing the agreement with you; legal obligation for the records |
| Kept for | license records: as long as the license exists, so that we can reissue a lost key; you may ask us to delete them, after which we can no longer reissue it. Invoices and order records: 7 years, as Dutch tax law requires |
Your license key contains the licensee name, number of seats, a license number and the issue and update dates. The software shows these so you can see who it is licensed to. The key is stored on your computers and in our license records, nowhere else. Our server issues the key and emails it to you from our own address.
When you renew, our renewal page asks you to paste your current license key. Our server checks it against our license records to find your license. It keeps only a random reference to that license, which the checkout passes back to us so the renewal reaches the right license; the reference is deleted a week after it expires (one hour after the check).
5. When you contact us
| Data | your email address, your name and whatever you write to us |
|---|---|
| Purpose | answering you and providing support |
| Legal basis | if you are a customer or use our software, performing the agreement with you; otherwise our legitimate interest in answering questions |
| Kept for | 2 years after the last message, unless it belongs to the business records in section 4; copies in our backups are deleted within 6 months after that |
Please do not send passwords, license keys of others or confidential data from your systems in a support request. If we need diagnostic information we will ask for it specifically.
6. Who else handles the data
We use a small number of service providers. They may only handle the data for the purpose stated.
| Provider | For |
|---|---|
| Paddle | sales, payment and invoicing, as an independent controller (section 4) |
| Microsoft (Microsoft 365) | our email, including the email that delivers your license key |
| Cloudflare | delivery and protection of the website |
| netcup GmbH | the server in Germany that hosts the website and our license records |
| Our accountant and the tax authorities | business records, where the law requires |
We do not sell personal data, and we do not share it with anyone else unless the law obliges us to.
7. Data outside the EU
Microsoft and Cloudflare are companies based in the United States and may process data outside the European Economic Area. Both are certified under the EU-US Data Privacy Framework, which the European Commission has found to give adequate protection, and our data processing agreements with both also include the Commission's standard contractual clauses. You can ask us for a copy of these safeguards at privacy@guilderworks.com.
Paddle.com Market Limited is based in the United Kingdom, for which the European Commission has adopted an adequacy decision.
8. Security
We keep personal data to the minimum described here, restrict access to ourselves, and protect accounts and devices with strong authentication and encryption.
9. Your rights
Under the General Data Protection Regulation you may ask us to:
- show you the personal data we hold about you;
- correct it if it is wrong;
- delete it, where we are not required to keep it;
- restrict its use, or object to a use based on our legitimate interest;
- give it to you in a portable form.
Some of these rights apply only under the conditions the law sets; if we cannot grant a request, we explain why.
Write to privacy@guilderworks.com. We answer within one month. For a complex request or many requests, the law allows us two more months; if we need them, we tell you within the first month. We may ask for something that shows the request comes from you.
If you are unhappy with how we handle your data, we would like to hear it. You may also complain directly, without contacting us first, to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) or to the authority in the EU country where you live or work.
We do not use personal data for automated decisions or profiling.
10. Changes
We may update this statement, for example when a product changes. The current version and its effective date are always on this page, and earlier versions remain available there. Changes that matter to you are announced on the website.
Earlier versions: version 1.0.