Privacy. The short version.
This policy covers three separate places where information may appear: the JEP app on your computer, this website, and Gumroad checkout. Each works differently, so we explain them separately below.
The JEP app.
Your folder activity stays on your computer. JEP does not upload your PIN, filenames, folder paths, or file contents. The app connects only for paid-license activation and when you manually check for updates.
No network for folder operations. Locking and unlocking happen entirely on your machine. Your PIN, filenames, file contents, and folder paths are not sent anywhere.
When you activate the paid version, the app sends your license key, platform, and a random installation ID to our license service. The service verifies the key with Gumroad, returns a signed license token, and the app stores that token locally. Installed licenses are then checked offline; there is no periodic license validation.
JEP checks for updates only when you choose Check now in Settings. It fetches a small version file from downloads.justenoughprivacy.com. There is no background update polling or automatic installation.
None. No usage analytics, no crash reports, no feature pings, no "anonymous metrics." If JEP crashes, we won't know unless you email us.
JEP stores a SQLite database, your settings, a random installation ID, local diagnostic logs, and — after paid activation — a signed license token in your operating system's application-support directory. Your PIN is stored there in plain text so JEP can provide a recovery path. This also means JEP is not designed to protect against someone who can access your computer account or application-support files. The database, settings, logs, and PIN are not uploaded; only the activation fields described above are sent during activation.
This website.
justenoughprivacy.com uses Cloudflare for hosting, DNS, security, and privacy-friendly aggregate analytics. We do not use advertising analytics, cross-site tracking, or visitor profiles.
We use Cloudflare Web Analytics for aggregate page and performance metrics. Cloudflare says this service does not use cookies, local storage, or fingerprinting to identify visitors. We use it to understand whether the site is doing its job. Cloudflare's documentation explains the service.
We do not set advertising, analytics, or preference cookies. Cloudflare Web Analytics is cookieless.
The site uses system fonts from your device. No third-party font service is contacted for typography.
As our hosting and security provider, Cloudflare may process standard request information such as IP address, requested path, and response code. We do not copy those request logs into our own customer or advertising database.
Gumroad handles your payment.
When you click Buy, you're redirected to Gumroad's checkout. They take your card details, process the charge, and email you a license key. We never see your payment information.
Your name, email, billing address (for tax purposes), and payment details. Gumroad processes the charge and remits sales tax / VAT where required. Their privacy policy covers what they do with that data.
Gumroad makes the purchase record available to us, including your name, email address, order details, product, and purchase date. We use it to issue and support your license and to contact you about critical product or purchase matters. We do not send marketing email or sell this information.
When you activate the paid version, our license service stores a one-way digest and last four characters of the license key, your email address, product, random installation ID, and activation time. It does not retain the reusable license key. The application code does not add an IP address or hardware fingerprint to the activation record. Cloudflare may still process standard request information as the service host.
What you can ask us to do.
If you bought a license, we have your email. If you didn't, we have effectively nothing tied to you. The list below is short on purpose.
Tell us what we know. Or tell us to forget.
Email help@justenoughprivacy.com from the address you bought the license with. We'll provide or delete the activation records we control. Gumroad keeps the purchase record under its own legal and retention obligations, and your locally stored license token remains on your computer until you remove JEP's application data.
Mark Wright, Ontario, Canada.
JEP is operated by Mark Wright from Ontario, Canada. PIPEDA applies to our handling of personal information. If you're in the EU or UK, GDPR rights apply where relevant. If you're in California, your CCPA rights apply. The mechanism is the same: email us.
If this policy changes.
We'll update the "last updated" date at the top, and — if the change materially affects what we collect or what we do with it — email everyone who's bought a license. We won't change this policy quietly.