Privacy Policy

1. Who We Are

This Privacy Policy explains how this website (the "Platform") processes personal data. The data controller is the platform provider identified on the About and Contact pages.

2. Data We Process

We process only the minimum data needed to operate the service:

a) Session cookies (essential) for signed-in areas of the Platform;

b) A pseudonymous hash of your IP address, your browser User-Agent string, and timestamps when you download a file — used solely to enforce the download limit of 30 downloads per IP address per 24 hours;

c) Account data (username, email, password hash) for registered publishers;

d) App metadata uploaded by publishers.

3. Purposes and Legal Basis

Data processing is based on our legitimate interest in operating a secure and abuse-resistant download service (Art. 6(1)(f) GDPR) and, for registered accounts, on the performance of our agreement with publishers (Art. 6(1)(b) GDPR). Raw IP addresses are not stored; only a keyed hash is retained, and it cannot be reversed to identify you.

4. Cookies

We use one essential session cookie ("dl_sid") required for account sign-in and CSRF protection. We do not use advertising, analytics or any third-party cookies. Your cookie consent choice is stored locally in your browser. See our Cookie Policy for details.

5. Retention

Download records are kept for 30 days to enforce rate limits and protect the service against abuse. Account data is kept while the account is active and deleted when the account is deleted.

6. Sharing and Third Parties

We do not sell, rent or share personal data with third parties. Data is stored on servers operated by the Platform provider and is not transferred outside the operating jurisdiction except as required by law.

7. Security

The Platform is served exclusively over HTTPS, employs hashed passwords, CSRF protection, and rate limiting. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, and the right to data portability. To exercise these rights, contact us via the Contact page. You may also lodge a complaint with your local supervisory authority.

9. Children

The Platform is not directed at children under the age of 13, and we do not knowingly collect personal data from them.

10. Changes

We may update this policy from time to time. The updated version will be posted on this page with a new effective date.