Privacy

This page covers todomaxxing.com and the Todo Maxxing Downloader desktop app. Questions and deletion requests go to hello@todomaxxing.com.

Browsing this website

Nothing is asked of you to read these pages. The site sets no cookies and no tracking scripts run in your browser beyond the one described under Analytics.

The access request form

If you ask for a license key, the form sends your name, your email address, the platform you picked, the optional note you typed, and the two-letter country code our host attaches to the request. That record is written to a private storage bucket that is not reachable from the public internet. It is used to issue your key and to reply to you, and for nothing else.

The free trial

The first time you open the app you can start a fourteen-day free trial, once per computer. To do that, the app sends a hash that identifies the computer, a second hash of its hardware (so a trial cannot be restarted under a new identifier), the computer name, the platform and the app version. The server stores those with the dates the trial started and ends.

To stop one network from starting too many trials in a day, the server counts them against a SHA-256 hash of the network address and the date. The address itself is not stored.

License keys

When you activate a license key, the app sends the key, an identifier for the computer, the computer name, the platform and the app version to the license server. The server stores a SHA-256 hash of the key rather than the key itself, alongside the device identifier, device name, platform, app version and the dates the device was activated and last seen. One key works on one computer.

While the app is running it tells the license server, about once an hour, that it is online, and again when it quits. That updates the last seen time and an online flag, and nothing else.

Activation returns a signed lease that the app verifies on your own machine, so it keeps working offline for up to seven days before it checks in again. The videos you download are never sent anywhere. They are written to the folder you choose and stay on your computer.

Hosting and server logs

The website and the license server run on Vercel. As part of serving a request, Vercel records the IP address, user agent and the path requested. Those logs exist for operations and abuse handling, and they age out on Vercel’s own schedule.

The installers and update files are hosted on GitHub Releases. When you download one, or when the app checks for an update, GitHub sees that request as it would any download.

Analytics

Vercel Web Analytics counts page views on this site. It is cookieless and does not build a profile of you or follow you to other websites.

Who else sees this

Nothing here is sold, rented or handed to advertisers. The companies that process it on our behalf are Vercel, which hosts the site, the storage bucket and the license server, and GitHub, which hosts the downloadable files.

How long it is kept

• Access requests are kept while the license they led to is active.
• License records are kept while the key is valid, and are deleted when the key is deleted.
• Trial records are kept so that a trial cannot be restarted on the same computer, and are deleted on request.
• Requests from people who never received a key are deleted within twelve months.

Having it removed

Email hello@todomaxxing.com and ask for a copy of what is held about you, or for it to be deleted. Deleting a license record turns off the key it belongs to, and deleting a trial record lets that computer start a trial again.

Changes

If what is collected changes, this page changes with it and the date at the top moves.