EFFECTIVE OCTOBER 27, 2026

Privacy Policy

Spoofit is designed to verify paid access without collecting the locations you select.

Information processed

• Checkout and billing information, including email, plan, subscription status, invoices, and payment-method metadata, is processed by Stripe. Spoofit does not receive your full card number.
• The billing service stores Stripe identifiers, keyed hashes of setup credentials and device identifiers, subscription dates, and webhook event identifiers.
• The desktop installer stores billing credentials and Apple signing state in the operating system’s protected credential storage or an encrypted local vault.
• Vercel Web Analytics processes anonymous, cookie-free website measurements such as pages viewed, referring site, approximate country, browser, operating system, device category, and selected actions such as opening checkout or downloading an installer. These events do not include account details, setup codes, device identifiers, selected locations, or precise location.

Information not sent to billing or analytics

The billing and analytics services do not receive selected locations, coordinates, routes, favorites, pairing files, Apple account passwords, Apple two-factor codes, or setup codes. Location and pairing data remain on your devices unless you deliberately share them.

Purposes

Information is used to understand website traffic and setup completion, improve website performance, create and administer subscriptions, prevent repeated trial abuse, link authorized devices, recover failed payments, provide receipts and support, protect the service, and meet tax and legal obligations.

Sharing

Information is shared with payment, hosting, analytics, security, tax, and support providers as necessary to operate the service or comply with law. Personal information is not sold for targeted advertising.

Retention and choices

Billing and transaction records are retained for accounting, fraud prevention, dispute, and legal requirements. Device access credentials can be rotated when reactivated. Anonymous website measurements are retained according to the hosting plan’s analytics settings. You can update payment details or cancel through the billing portal and request available privacy rights using the support information on your receipt.

Security and children

Spoofit uses HTTPS, restricted server secrets, hashed device identifiers, and protected local credential storage. No system is perfectly secure. Spoofit is not directed to children who cannot legally consent; a parent or guardian must complete purchases for minors.

Policy completion

Before commercial launch, this policy must be reviewed and completed with the operator’s legal identity, postal and privacy contact, hosting subprocessors, retention periods, and any regional disclosures that apply.