Privacy policy

• Your scripts never leave your computer. The app doesn't send them to us, and the phone remote works only on your own network.
• To run the trial and check licenses, the app sends us an anonymous fingerprint of the computer, its name and the app version.
• For an account we keep your name, company, email and a hashed password. Stripe handles your card. We never see the full number.
• We set only the cookies needed to keep you signed in. There is no advertising or tracking, and we don't sell data.
• You can delete your account yourself, at any time, from your profile.

Lapmob, Inc. (“we”) makes Cross Prompter and runs this website. We decide how the data described here is used. Reach us through the contact form (topic “Privacy and my data”).

The app contacts our server when it starts, every 6 hours while it runs, and when you install a certificate. Each time it sends:

• A computer fingerprint. This is a one-way SHA-256 hash of the Windows installation ID and the hardware UUID. We can't work out either one from it. It lets us count the trial once per computer and tie each certificate to one computer.
• The computer's name (for example “STUDIO-PC-2”), so you can tell your machines apart under Account → Licenses.
• The app version, so we know which versions are still in use.
• Your license certificate, if one is installed. It identifies your license, nothing more.

The app doesn't send your scripts, file names, settings, presets, or anything about how you use it. The phone remote runs a small web server on your PC that only devices on your own network can reach. Nothing in it passes through us.

• Account: your email, full name, optional company name, and your password (stored only as a salted hash). Your name and company appear in the app as the license holder.
• Subscription: your plan, billing interval, renewal date and payment status, plus the reference numbers Stripe gives us for your customer record and subscription.
• Licenses: each certificate's serial number and label, and for the computer it's used on, the fingerprint, computer name, activation date, last check time and app version.
• Contact messages: what you write in the contact form, with your name, email, company and the IP address it came from.
• Server logs: IP addresses and request times, kept briefly to limit abuse such as password guessing.

Payments are processed by Stripe, Inc. You enter your card on Stripe's checkout page, not ours. Stripe tells us whether a payment succeeded and when your plan renews. It never gives us your full card number. Stripe processes your payment details under its own privacy policy at stripe.com/privacy.

• To provide the service: run the trial, issue and check licenses, take payments, and keep your account working. That is our contract with you.
• To keep the service secure and prevent misuse, such as one trial reused on many computers or one certificate shared between machines. That is our legitimate interest.
• To email you about your account: password resets, payment problems and changes to these terms. We don't send marketing email.
• To answer your messages.
• To keep invoices and payment records as tax law requires.

The website sets two cookies, both needed for it to work:

• sessionid keeps you signed in. It lasts two weeks, or until you sign out.
• csrftoken protects your account from forged requests from other sites.

We don't use analytics, advertising or social-media cookies. The fonts come from our own server, so loading a page doesn't contact a font service.

We share data only with the companies that help us run the service, and only what each one needs:

• Stripe, for payments and invoices.
• Our hosting provider, which runs the servers and database.
• Our email provider, which delivers account emails.

We don't sell or rent personal data, and we don't share it for advertising. We disclose data to authorities only when the law requires it.

• Account, subscription and licenses: until you delete your account. Deleting it cancels any subscription and removes your profile and certificates at once.
• Trial records (fingerprint, computer name, dates): kept so the same computer can't start a second trial. They aren't linked to an account.
• Payment records and invoices: kept by Stripe and by us for as long as tax law requires.
• Contact messages: kept while we need them to help you, then deleted.

You can do these yourself in your account:

• Correct your name, company or email under Account → Profile.
• Rename or revoke a certificate, or move it to another computer, under Account → Licenses.
• Delete your account under Account → Profile.

Depending on where you live, you may also have the right to get a copy of your data, to object to how we use it, or to complain to your data protection authority. To use any of these rights, write to us through the contact form (topic “Privacy and my data”) from the email address on your account. We answer within 30 days.

Connections to the website and the license server are encrypted. Passwords are stored only as salted hashes. Certificates are encrypted with a key that never leaves our server, and the server's answers are signed so the app can tell they are genuine. No system is perfectly secure. If we learn of a breach that affects your data, we will tell you.

The service is for businesses and adults. We don't knowingly collect data from anyone under 16.

Our service providers may process data in other countries, including the United States. Where the law requires it, these transfers rely on safeguards such as the European Commission's standard contractual clauses.

If we change what we collect or how we use it, we will update this page and its date. If the change is significant, we will also email account holders before it takes effect.