Privacy Policy

This policy explains what personal data we collect on blaj.pl and through SSH Tunnel Manager, why we collect it and what rights you have. We collect as little as we can.

1. Data controller

2. What we collect and why

• Contact form. Your email address, name and message, so we can reply to you. Legal basis: our legitimate interest in answering your questions (Art. 6(1)(f) GDPR), or taking steps before a contract at your request (Art. 6(1)(b) GDPR).
• Purchases. Payments are handled by Paddle.com, our Merchant of Record. Paddle collects your payment details and acts as an independent controller of them under the Paddle Privacy Policy. Paddle shares with us the data we need to provide your subscription: your email address, name, country, order and subscription details. We never see your full card number. Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and our accounting and tax obligations (Art. 6(1)(c) GDPR).
• Server logs. When you visit the website or download the Software, our servers record technical data such as your IP address, browser type and the time of the request. We use it only to keep the service secure and working. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR).

3. The SSH Tunnel Manager app

Your tunnel configuration, hosts, ports and saved credentials are stored only on your own computer. They are never sent to us. When the app checks for updates or verifies a Premium subscription, it connects to our servers or to Paddle, which receive your IP address and, for Premium, the data needed to confirm your subscription.

4. Cookies

We do not use advertising or analytics cookies and we do not track you across websites. We only use cookies that are strictly necessary, for example to keep an administrator signed in. When you open the Paddle checkout, Paddle may set its own cookies needed to process the payment securely.

5. Who we share data with

We do not sell your data. We share it only with:

• Paddle.com, to process orders, payments, taxes and refunds;
• providers that host our website, servers and email, only as far as they need to run those services;
• public authorities, when the law requires it.

Some of these providers may process data outside the European Economic Area. In that case we rely on safeguards approved by the European Commission, such as Standard Contractual Clauses.

6. How long we keep data

• contact messages: for as long as needed to handle your question, and no longer than 2 years;
• order and invoice data: for the period required by Polish tax law, usually 5 years;
• server logs: up to 90 days.

7. Your rights

You have the right to access your data, correct it, delete it, restrict or object to its processing, and to receive it in a portable format. To use any of these rights, write to [email protected]. You can also lodge a complaint with the Polish data protection authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, uodo.gov.pl), or with the authority in your country.

8. Changes to this policy

We will update this page when the way we handle data changes. The date at the top shows the latest version. See also our Terms and Conditions and Refund Policy.