Privacy Policy

Who we are

ProofPup is a solo-built product. The controller of your personal data is Laszlo Kovacs, an individual established in Spain (CL Rascassa 4, 03700 Dénia, Alicante, Spain; NIF ESZ0050141Y). ProofPup is a social proof widget tool built specifically for Polar sellers — developers and creators selling software on Polar. You can reach us at hello@proofpup.app.

What data we collect

We collect only what is necessary to provide the service:

• Email address - Collected when you create an account or joined our pre-launch waitlist. Used to contact you about your account and the product.
• Polar OAuth2 credentials - OAuth2 access and refresh tokens obtained when you authorize ProofPup on your Polar account. Stored encrypted at rest. Used exclusively to list your organizations and products, fetch order data, and create or remove the ProofPup webhook. We request only the scopes needed for this.
• Order data from Polar - The first word of the customer name on the order (usually a first name, but it may be a username or handle if that is what the customer entered), billing country, product name, and purchase amount from your Polar orders, delivered via webhook. The widget displays the name, the product, the product image and how long ago the purchase happened; the amount and the country are stored but not displayed. Product images are stored by Polar, but they are resized and cached by our own CDN, so the browser showing the widget loads them from us rather than from Polar. We do not store payment details, card numbers, or customer email addresses. We retain the last 50 events per site.
• Website domain - The domain(s) you register to use the widget on. Used to verify widget requests.
• Widget usage - We count how many times the widget loads on each of your sites, per day, as a single running number per site. No information about the visitor is recorded: no IP address, no identifier, no per-visit record, and the widget sets no cookies.

What we do not collect

• Your visitors' personal information - the widget reads nothing about the person viewing your site
• Payment or card details of any kind
• Cookies for tracking or advertising
• Data for any third-party advertising purposes

How we use your data

We use your data only to operate the ProofPup service:

• To provide, maintain, and improve the widget service
• To communicate with you about your account, billing, and product updates
• To show you how often your widget is loaded

We do not sell, rent, or share your data with third parties for marketing purposes. Ever.

Third-party services

We use a small number of third-party services to operate ProofPup:

• Cloudflare — Hosting, DNS, and edge infrastructure. Data may pass through Cloudflare's global network.
• Resend — Transactional email delivery (sign-in codes and account emails). Your email address is stored in Resend's system.
• Polar — We connect via OAuth2 and receive your paid order events via webhook. Polar also handles our own subscription billing, so your payment details are processed by Polar and never reach us. We are not affiliated with Polar, Inc. Your use of Polar is subject to Polar's own privacy policy.

Data retention

We retain your account data for as long as your account is active. We keep the last 50 purchase events per site and the daily widget-load counters for as long as the site exists; deleting a site deletes both. To close your account, email us: we then revoke your Polar OAuth2 credentials and delete your data within 30 days. You can also revoke the ProofPup authorization yourself at any time in your Polar dashboard.

Your rights (GDPR)

If you are located in the European Union, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Receive your data in a portable format

To exercise any of these rights, email hello@proofpup.app. We will respond within 30 days.

Security

Your Polar OAuth2 credentials are encrypted at rest. We use HTTPS for all data in transit. Access to production systems is restricted. We take security seriously - if you discover a vulnerability, please disclose it responsibly at hello@proofpup.app.

Changes to this policy

We may update this policy as the product evolves. When we make significant changes, we will notify you by email. The date at the top of this page indicates when it was last updated.

Contact

Questions about this policy or how we handle your data? Email us at hello@proofpup.app. We read every email.