This document is a review draft and is not in force. Prepared on 15 September 2026. It is intended to describe Godsend’s service; any processing already taking place remains subject to applicable data-protection law.
1. Controller and contact
The controller for the Godsend account, website operations, license administration, and support data described here is Marek Jóźwiak, trading as Godsend, ul. Okopowa 14/92, 01-063 Warszawa, Poland, NIP 5273223291, REGON 545009660.
For privacy requests, write to [CONTACT_EMAIL — to be confirmed before publication] or the postal address above. Put “Privacy request” in the subject if convenient. You do not need a paid account to exercise your rights.
Polar is the independent controller for its checkout, payment, tax, fraud-prevention, and reseller activities. GitHub and Google separately control their own sign-in services. Their own notices explain those activities. We remain responsible for the personal data we receive and process for Godsend.
2. Data we receive
Depending on the features you use, we process:
- account details: name, email, verification status, optional profile image, account identifiers, and account status;
- authentication records: password hashes, linked sign-in provider and its identifiers, encrypted provider credentials where required, sessions, and verification or recovery records;
- purchase and access records: order, customer, subscription, refund, offer, and entitlement references; the purchased scope; relevant amounts, dates, and status information;
- registry records: token labels, safe token prefixes, keyed token hashes, creation and expiry dates, last-use and revocation information, and download history identifying the account, release, framework, time, and outcome;
- security and operational records: request identifiers, rate-limit and security events, coarse error and delivery outcomes, and limited request information needed to operate and protect the service;
- communications: messages you send us, order or diagnostic information you choose to include, and transactional-email delivery records; and
- preferences and privacy records: selected theme or framework, consent or objection records where relevant, and records of requests to exercise your rights.
You provide account information and correspondence directly. Sign-in providers supply the profile and account information you authorize them to share. Polar supplies transaction and subscription information needed to administer access. Operational records arise when the relevant service is used.
We do not receive or store your complete payment-card details. Payment information is handled by Polar and its payment partners. Godsend registry-token secrets are shown once and stored as keyed hashes rather than recoverable plaintext.
Our application telemetry is designed to exclude passwords, cookies, authorization headers, full registry tokens, payment payloads, private source code, and free-form form contents. Network providers still process IP addresses and request metadata to carry traffic and protect their services. A keyed abuse-detection fingerprint may be used instead of retaining a raw address in our download audit. We do not describe those pseudonymous records as anonymous while they can still be linked to an account.
3. Purposes and legal bases
Where the GDPR applies, the following purposes and bases apply to our processing:
Necessary account and order information is required for the corresponding service. Without it, we may be unable to create an account, verify a purchase, or supply private source. Optional marketing, analytics, and unrelated profile information are not a condition of buying or using the product.
We assess whether legitimate-interest processing is necessary and proportionate and take your rights into account. You can object to that processing as explained below.
4. Providers and other recipients
We disclose only the data needed for the relevant purpose. Our service stack uses the following provider categories and brands:
Hosting, database, email, and diagnostic providers act as processors where they process personal data on our instructions, under the relevant data-processing terms. They may act independently for limited purposes required by their own legal obligations. A sign-in provider is not given your Godsend registry token or private source merely because you use it to sign in.
Professional advisers may receive information needed for accounting, legal advice, or a dispute, subject to confidentiality. Authorities may receive information where law requires or permits disclosure. A prospective business successor may receive necessary records under appropriate confidentiality and data-protection safeguards; we will notify you of a controller change where required.
We do not sell personal information or provide it for third-party targeted advertising. Customers’ private project repositories are not required for ordinary product use. Do not submit confidential project source in a support request unless we have agreed a suitable limited and secure process.
5. Processing locations and international transfers
Our database setup uses an EU region, and the selected regional arrangements for error monitoring and any future product analytics are intended to keep their primary datasets in Europe. Website requests use a global delivery network. EU hosting does not mean that every provider, support operation, or subprocessor is located in the EEA.
Where data is transferred outside the EEA, the transfer must use an applicable safeguard: an adequacy decision covering the recipient and processing, or appropriate contractual safeguards such as the European Commission’s Standard Contractual Clauses with the required assessment and supplementary measures. We do not assume that a provider’s US location or participation in a framework covers every transfer.
You may ask us which safeguard applies to a relevant transfer and request a copy or description, with information redacted only where necessary to protect others’ rights or confidential security details. Provider notices and subprocessor information offer further detail. We will not rely on a general acceptance of this notice as consent for routine international transfers.
6. Retention
The following are our ordinary retention periods. We restrict retention to the purpose stated and delete or anonymize records when that purpose ends.
These periods cover Godsend’s records. Polar and other independent controllers apply their own legally required schedules to records they control.
A specific dispute, fraud investigation, legal obligation, or authority order may require a limited record to be held longer. Such a hold must have an identified reason and scope and must not become indefinite retention of the whole account. We can explain the applicable rule when responding to a request unless disclosure is legally restricted.
Deleted data can remain in isolated recovery copies until they expire. The planned longest ordinary backup cycle is 90 days. Those copies are used for recovery, not routine access; if restored, outstanding deletion and restriction instructions must be reapplied. Truly anonymous aggregate statistics may be retained because they no longer identify an individual.
7. Your rights
Subject to the applicable conditions, you may request access and a copy of your personal data, correction of inaccurate information, erasure, restriction of processing, or portability of data processed by automated means on the basis of consent or a contract.
You may object to processing based on legitimate interests for reasons relating to your situation. We will stop unless the applicable law permits continued processing on overriding grounds or for legal claims. If we ever process your data for direct marketing, you may object to that marketing at any time and we will stop using it for that purpose.
You may withdraw consent at any time without affecting the lawfulness of earlier processing. Refusing or withdrawing optional analytics or marketing consent does not remove paid access.
We will normally respond within one month. If a request is complex or numerous, the GDPR allows an extension of up to two further months; we will explain the extension within the first month. We may ask for proportionate information to verify identity where necessary, without routinely requiring a copy of an identity document. Requests are normally free. Any refusal, restriction, or permissible charge must be explained and based on the relevant legal conditions.
A request for deletion does not require us to erase records that law requires us to retain. We will identify the relevant exception and limit continued use. An export must protect other people’s rights and authentication secrets; this does not justify a blanket refusal to provide the personal information to which you are entitled.
You can complain to the President of the Polish Personal Data Protection Office (Prezes UODO), ul. Stanisława Moniuszki 1A, 00-014 Warszawa, Poland, or another competent supervisory authority, including in your place of habitual residence or work. See UODO’s contact and complaint information. You do not have to contact us first.
8. Automated checks and security
Software checks account status, payment entitlements, token validity, and rate limits to authorize access and detect abuse. We do not use those checks to make solely automated decisions that produce legal or similarly significant effects without the safeguards applicable to such decisions. Contact us for human review if an automated access decision appears incorrect.
We use access controls, encrypted transport, restricted provider credentials, and measures designed to keep secrets out of logs. Some records must remain available to operate the service; hashing a token does not mean every associated record is anonymous. No system can guarantee absolute security. We will notify authorities and affected people of a breach where the law requires it.
9. Optional analytics, communications, and updates
Product analytics and a marketing newsletter are not enabled in the current site implementation. The planned analytics provider is PostHog Cloud EU. Introducing either feature requires an updated notice, an appropriate separate choice, and a working withdrawal mechanism before optional collection or communication starts. Session replay and advertising tracking are not part of the current design.
Transactional messages, such as verification, recovery, payment, and security notices, are sent when needed to provide or protect the service. They are not treated as marketing consent.
The Cookie notice describes browser storage separately. We will update this notice when material processing changes. A notice update does not itself create a new legal basis or replace consent where it is required.