Privacy

The app

• Your files stay on your computer. Stamppa opens, edits and saves files locally. It has no cloud storage and no telemetry: it never sends your documents, their names or contents, or data about how you use it.
• When it connects. Only when you open it and when you act (sign in, Renew now, change computers, sign out) to confirm your license. Never in the background. It works offline: it needs to connect once a year on the yearly plan and once a month on the monthly plan, with a grace period after that. Without an account, Stamppa works as a free reader and connects only for the update check.
• What it sends then. Your email (and the 6-digit code when you sign in), a session token, the name you gave the computer and its system (for example “Windows 11”), and a fingerprint of the computer: a hash made on your computer from its hardware identifier and a random number. The raw identifier never leaves your computer.
• Update check. When it opens, at most once a day, Stamppa downloads https://stamppa.com/latest.json to compare version numbers. Nothing about you is sent. Turn it off in the update notice (“Check for updates automatically”).
• Problem reports. Help ▸ Report a problem makes a .zip on your computer with the error log and system details, never your documents, file paths or license. You see its contents first, and it only reaches us if you email it.

Your account and the license server

Your license belongs to your email. Our license server (api.stamppa.com) keeps:

• Your email and name, to sign you in and to show whose license it is.
• Your license: edition, plan, paid period, months paid, status (for example a refund), and for Team and Site the emails of the people who hold seats.
• Each computer you sign in on: the name and system it reports, its fingerprint (a hash, never the raw identifier), and when it last connected, so you can see your 3 computers and choose which one to sign out.
• Trials: the email and computer fingerprint that started one, so each gets one trial.
• Sign-in codes, sessions and, if you create one, your password, stored as hashes, with a record of when the password was created, changed or removed.

It does not keep your IP address in its database (a short-lived rate limit uses it for a few minutes, to stop abuse) and it never has anything about your documents.

How long

• Your account, licenses and computers: while your account exists, and 12 months after your last license or trial ends. Then they are deleted.
• Sign-in codes expire after 10 minutes and sessions when you sign out or they lapse; expired ones are deleted.
• Wrong-password attempts are kept for 15 minutes, and the record of password changes for 12 months.
• A computer you sign out is kept in your history only as long as needed to apply the limit on remote sign-outs (12 months).
• Payment and tax records are kept by Polar and by us for as long as tax law requires.

Who processes it for us

• Cloudflare runs the license server and its database.
• Resend sends the emails with your sign-in code.
• Polar handles payments as our reseller and merchant of record, under its own privacy policy. We never see your card details. Polar shares with us what we need to issue and support your license: your name, email, company, country, order and subscription status. Polar uses Stripe to process cards.

This website

• No cookies, no trackers. Visit counts without cookies. We count visits with Cloudflare Web Analytics, which sets no cookies, doesn’t use your IP address to identify you and doesn’t follow you to other sites. It records which page was viewed, the page you came from, your browser, device type and country, and how fast the page loaded, and we only see totals. It is not used on the in-browser stamping, My account, sign-in or VIP pages.
• Preferences in your browser. Your choice of language and light/dark theme is kept in your browser’s local storage. It never leaves your device.
• Stamping in your browser. On the stamping demo, the PDFs and logo you use there are read and stamped inside your browser and never sent to us: the page’s security policy forbids it from sending data at all (how it works). Your last stamp design (without the logo) is kept in your browser’s local storage so it is there next time.
• My account. The My account page is the only page that talks to the license server, to sign you in and show your license and computers.
• Server logs. Our host, Cloudflare, keeps standard request logs (IP address, page, time) for security, for a short period.
• Downloads. When you download an installer (from the download page or the VIP area), we send ourselves a short internal email through Resend: the version, the file, Mac or Windows, your country and the name of your network (for example, your internet provider) as Cloudflare reports them, your browser’s identifier (user agent), the time and the page you came from, and in the VIP area your email. We use the browser identifier, the network and the pace of downloads only to tell people from automated downloads. To count each download once, a keyed hash of your IP address is kept for 10 minutes, and a second one for 1 minute to notice several files at once; then both are discarded. Your IP address itself is never stored.
• “Email me the link” and the quote form open your own email app. We only receive what you choose to send.

Email

When you write to support@stamppa.com, we keep the conversation to help you and for our records. Besides the sign-in codes and messages about your license and your account, we don’t send email unless you ask for it.

Your rights

You can ask us what we hold about you, to correct it, or to delete your account (except what we must keep for tax records). Deleting the account ends its licenses. Write to support@stamppa.com from the email of the account.

If you are in Europe (GDPR)

If you are in the European Economic Area, the United Kingdom or Switzerland, the GDPR (or the UK GDPR, or Swiss data-protection law) applies on top of everything above. Plano Base Arquitectos S.A.S. is the controller of your data.

• Why we use each piece of data (legal basis). Your email, name, licenses, computers, seats, sign-in codes, sessions and, if you create one, your password (stored as a hash): to provide the account and license you asked for (performance of a contract, art. 6(1)(b)). The short-lived rate limit, the short-lived download hashes, the browser identifier and network on download notices, server logs and cookie-free visit counts: to keep the service secure and to know it is used, without identifying you (legitimate interests, art. 6(1)(f)). Payment and tax records: because tax law requires them (legal obligation, art. 6(1)(c)). We don’t use your data for advertising or profiling, and we make no automated decisions about you.
• Your rights. You can ask for access, correction, deletion, restriction and portability (a copy of your account data in a common format), and object to what we do on the basis of legitimate interests. Write to support@stamppa.com from the email of the account; we answer within one month. You can also complain to the data-protection authority where you live or work.
• Transfers outside Europe. We are in Colombia, and Cloudflare, Resend and Polar (with Stripe) may process data in the United States and other countries. They do so under the safeguards they offer for it, such as the European Commission’s standard contractual clauses and, where it applies, the EU-US Data Privacy Framework.
• How long. As listed under “How long” above.

Who we are

Plano Base Arquitectos S.A.S., a company registered in Colombia, is responsible for your data: Calle 18 # 61-29, Apto. 411 C, Cali 760036, Valle del Cauca, Colombia. Colombian data-protection law (Ley 1581 de 2012) applies, alongside the rights you have where you live.

License agreement · Refund policy