Privacy
What this site records, why, for how long — and what it does not record.
Who processes this data
The data controller is the publisher of this site, who operates the server it runs on.
Thomas Peters, Rue Balatum 4 boîte 201, 1332 Genval, Belgium. Contact address: contact@open-studio.tech. The site is hosted by Hostinger International Ltd, 61 Lordou Vironos str., 6023 Larnaca, Cyprus.
What this site records
Five kinds of processing, and no more. Each has a stated purpose, a legal basis and a retention period.
The mailing list
The product has no auto-update: this list is the channel through which a new version is announced. That is its only reason to exist.
- Recorded are: your address, the language of the page you subscribed from, the boxes you ticked, where the subscription came from, and the consent and unsubscribe dates.
- The legal basis is your consent, evidenced by the confirmation you clicked. An unconfirmed subscription never receives anything other than its confirmation request.
- A subscription left unconfirmed is deleted after 30 days.
- A confirmed subscription is kept until you unsubscribe. The unsubscribed row is then kept for 3 years, after which it is deleted along with your address. It serves one purpose only: proving that your withdrawal was acted on.
- You can subscribe again whenever you like. A new subscription goes through e-mail confirmation, exactly like a first one — whether or not the previous row still exists.
- After confirming, you receive a series of five onboarding messages spread over five weeks: getting started, product features, and the end of the trial period. They are sent manually, and nothing measures whether you open them.
The download counter
Each download adds a row holding the version, the system and the date. It tells how many times an installer was fetched, and nothing else.
No IP address is recorded: the table has no column to hold one. The referring page is kept without its query string.
Testimonials
A published testimonial carries a name, a role and sometimes an organisation. It is published only with written agreement, whose date is recorded. A withdrawal request is applied without discussion.
Server logs
The server keeps technical logs, needed to operate and secure it. They are kept for as long as diagnosing an incident requires, and serve no other purpose.
What this site does not record
- No browsing profile, no tracking from page to page, no IP address in the database.
- No advertising cookie, no social network button, no resource loaded from another domain.
- No address is sold, rented, exchanged or passed to anyone for commercial purposes.
- And the software itself sends nothing: what you open in Debug XML Tool does not leave your machine. That is not a promise of the site, it is a property of the product.
Cookies
This site sets no analytics or advertising cookie. Only two mechanisms keep anything on your machine:
- Your light or dark theme choice, in your browser local storage. It never leaves your machine and no server reads it.
- A technical session cookie, created only when you open a form, used to protect that form submission.
That is why you see no consent banner: there is nothing to consent to.
Who else sees this data
The data stays on the publisher server. Two technical providers are necessarily involved:
- The hosting provider running the server hardware.
- The e-mail delivery provider carrying the mailing list messages. Nothing is sent today: the service is not connected yet.
Your rights
You have the right of access, rectification, erasure, restriction, objection and portability.
- Withdrawing consent requires writing to nobody: every message carries an unsubscribe link, with no password and no form.
- To find out what is recorded about you, simply ask at the contact address.
- An erasure request means real erasure: the row is deleted, not flagged inactive.
- If you ask for the erasure of an already unsubscribed record, the proof of that unsubscription disappears with the row: this address could then subscribe again as an unknown one. The right to erasure comes first.
You may also lodge a complaint with the Belgian Data Protection Authority (Rue de la Presse 35, 1000 Brussels - contact@apd-gba.be), or with the supervisory authority of your country of residence.
Purchases and licences
Buying a licence creates an order. It is the only processing on this site that rests on the performance of a contract rather than on your consent:
- Recorded are: your e-mail address as Stripe passes it to us, the name to be written on the licence, the machine fingerprint you entered, the amount, the VAT, the country of taxation, the language of the order and the payment session identifier.
- The legal basis is the performance of the sales contract, together with our accounting and tax obligations: this data cannot be erased on request for as long as those obligations run.
- An order is kept for the duration of the warranty and of the accounting obligations, that is 10 years from the sale. After that, it is deleted.
- Payment is handled by Stripe, acting as a processor: your card number never reaches this site, and is therefore never recorded here. Stripe also issues the invoice.
The signed licence key is stored nowhere on this server: it is produced offline, passes through only for the time it takes to send it, and is gone.
Buying subscribes you to nothing. If you receive new version announcements, it is because you ticked the box and confirmed your address, by the same route as everyone else.
The French version prevails
The English version of this page is a courtesy translation. These texts are governed by Belgian law, and only the French version has legal force.