Privacy Policy

Coinetic protects your computers. It sends us only what it needs for your license, for the features you use and for support - and never your firewall log, your traffic or your files unless you send them to us yourself.

Last updated: 25 October 2026

1. Who is responsible

The controller for the processing described here is:
Salus Alpha Group AG, Industriestrasse 56, 9491 Ruggell, Liechtenstein
E-mail: privacy@coinetic.io - full details in the Imprint.

2. What Coinetic sends, and why

Coinetic runs on your computer. Everything it shows - firewall log, connections, open ports, rules, failed logins, bans, VPN users, web server requests - is processed locally and is not sent to us. Coinetic contacts our server (relayer.coinetic.io) only for the purposes below.

Purpose	Data	Legal basis (GDPR)
License check (at start and about every few hours)	License key; computer ID (SHA-256 hash of the board's UUID and Windows' machine ID); computer name; Windows and Coinetic version; public IP address; time	Contract (Art. 6(1)(b)) - to deliver the licensed software and enforce the number of computers
Free trial	Computer ID, computer name, public IP address, time	Legitimate interest (Art. 6(1)(f)) - one trial per computer and one shared company trial per internet connection, to prevent abuse
Ask AI (Pro + AI and trial)	Your question; the context Coinetic adds (shown in the chat under "Context from Coinetic" - e.g. a log line, an IP address and its owner, a rule, a user name from a failed login, this computer's Windows version and installed tools); and, if "Let the AI look up more data" is ticked, the read-only Coinetic data the AI requests while answering	Contract (Art. 6(1)(b))
Bug report / feature request	What you write; your contact address if you enter one; and only if ticked: the recent protection log, the self-test report, a screenshot of the Coinetic window (never the desktop); plus license key, computer ID and name, versions, IP address	Contract / legitimate interest in fixing faults (Art. 6(1)(b), (f))
Contact for security and licence notices (optional, Help › License)	The e-mail address you enter, and if you add them a name, company and country; when and from which computer it was set (see 6d)	Legitimate interest (Art. 6(1)(f)) in warning the users of our software about security issues and licence matters; contract (Art. 6(1)(b)) for licence information. Remove it at any time in the same place
Attack statistics	Counts per hour: inbound connections blocked, retries of banned attackers, bans by kind - no addresses, no names, no log content; linked to the computer ID so that only licensed installations count	Legitimate interest (Art. 6(1)(f)) - the public live numbers on coinetic.io. Switch off: Help › License › "Share anonymous attack statistics"

Other lookups Coinetic makes from your computer: to show who owns an address, Coinetic queries public internet registries (RDAP / WHOIS) with that address only. It checks program signatures with Windows' own functions.

Names stay on your computer. Before anything is sent to the AI, Coinetic replaces user names, e-mail addresses and people's names with placeholders (USER-1, USER-2 ...); the answer shows the real names again on your screen only. IP addresses and generic account names that attackers try (administrator, root ...) remain visible, because the AI needs them to judge an attack. You can switch the replacement off under Help › AI relay service.

Data in the AI context may relate to other people - for example the IP address of someone who tried to log on to your Server or PC. You decide what you ask; we process it only to answer you.

3. The AI service

Questions are answered by AI models of specialised third-party providers, which process them on our behalf as processors under a data processing agreement. We may use several providers and change them; some of them are located outside the EU/EEA, for example in the USA (see section 7). We only use providers that are contractually not allowed to use your questions to train their models. The AI can only read Coinetic data; it cannot change anything on your computer.

To allow follow-up questions, a conversation is kept on our server for 30 days and then deleted. Our license database records only that a question was asked (time, computer, success) - not its text.

4. Payments

Purchases are made through Bright Market, LLC d/b/a FastSpring, our online reseller and merchant of record. FastSpring collects and processes your payment and billing details under its own privacy policy. We receive from FastSpring your name, e-mail address, country, the plan, number of computers, price and subscription status, so we can switch your license accordingly, and to keep you informed about the product you bought (section 6d). We never receive your card details.

5. This website

• No tracking cookies, no advertising, no Google Analytics.
• We count visits with Cloudflare Web Analytics. It sets no cookies, stores nothing on your device and does not identify you or follow you across sites; we only see totals (pages viewed, referring website, country, browser and device type). Legal basis: our legitimate interest in knowing how the website is used (Art. 6(1)(f)).
• This website is hosted by Cloudflare, Inc. Cloudflare processes your IP address and the page requested to deliver the site and protect it against attacks (Art. 6(1)(f)); we do not receive these access logs.
• The fonts are served from coinetic.io itself; no font provider (such as Google Fonts) is contacted.
• The live numbers are read from our own server (relayer.coinetic.io/stats.json) - totals only.
• On the buy page, FastSpring's checkout (sbl.onfastspring.com) is loaded to process the payment; FastSpring may set cookies needed for the checkout.

6. Partner program

If you sign up as a partner, we process your name, company, e-mail address, country, VAT ID, bank account and a password hash to run the program and pay commissions (Art. 6(1)(b) GDPR), and keep payout records as required by tax law. Your partner session lives only in your browser tab. When a visitor comes through a partner link, the partner code is passed on in the page address and counted once per visit; nothing is stored in the visitor's browser for this. If you buy with a partner code, that partner sees the sale (date, plan, amount) without your name; a reseller who bought a license for you sees that license with your name.

6a. E-mail and support

When you write to us, we use your message and address to answer. Our e-mail is hosted by Google Ireland Ltd. (Google Workspace).

6b. Newsletter

If you subscribe on coinetic.io or in Coinetic (Help › Subscribe to the newsletter), we use your e-mail address to send you our newsletter, about once a month: security news, new Coinetic features and tips. You only receive it after you confirm the link in our confirmation mail (double opt-in). We record the time of sign-up and confirmation and where you subscribed, as proof of your consent. Legal basis: your consent (Art. 6(1)(a) GDPR).

You can unsubscribe at any time with the link in every newsletter or by writing to privacy@coinetic.io; this does not affect the lawfulness of mailings before. The newsletter is sent by Brevo (Sendinblue SAS, France) on our behalf; Brevo also records whether a newsletter was opened or a link clicked, so we can improve it. Your address is not shared with anyone else.

Protection against misuse of the sign-up forms (newsletter and partner sign-up on coinetic.io): before a confirmation mail is sent, our server checks that the address is well-formed, that its domain can receive e-mail (a DNS look-up of the domain) and that it is not a throwaway address. Cloudflare Turnstile (Cloudflare, Inc.) checks that a human submits the form; for this it processes technical data such as your IP address and browser signals. Turnstile sets no tracking cookies and is not used for advertising. To limit repeated sign-ups we count requests per IP address for up to 24 hours, and we keep a one-way hash of the address for 24 hours so that it gets at most one confirmation mail per day. Legal basis: our legitimate interest in protecting the forms and our mail system from abuse (Art. 6(1)(f) GDPR).

6c. Unlock from my phone (device approval)

If you register a phone in Coinetic to unlock a closed port of your computer, your phone creates a passkey for coinetic.io. Your fingerprint or face is checked by the phone itself and never leaves the phone; we receive only the passkey's public key. We store the public key, the name you give the phone, the computer it may unlock, the ports and the maximum time. For each unlock we store the internet (IP) address your phone used, its country (looked up in the public internet registries, RDAP), the ports and the time - this is needed to open the port of your computer for exactly that address and to close it again. Unlock records are kept for 30 days, then deleted; the phone's registration is kept until you remove it in Coinetic. The page remembers in your phone's browser only a random identifier of the registration (no password, no key). Legal basis: contract (Art. 6(1)(b) GDPR).

6d. Customer communication

If you buy Coinetic, we send you e-mails about Coinetic: new features, important updates, security notices about the product, and licence and renewal information. These e-mails are sent on our behalf by Brevo (Sendinblue SAS, France). For this, our server keeps you on a customer list at Brevo with your name, e-mail address and company, and with the details of your subscription: plan, billing period, number of computers, subscription status (for example active, cancelled or refunded), renewal date, the date you became a customer and - if you bought through a partner - the partner's code. After a cancellation or a refund you stay on this list with your status, so that we can tell you about new versions of the product you used.

Legal basis: the contract with you (Art. 6(1)(b) GDPR) for licence, renewal and security information about the product you use; and our legitimate interest in informing existing customers about our own similar products (Art. 6(1)(f) GDPR), within the rule for e-mail advertising to existing customers (Art. 13(2) of the ePrivacy Directive 2002/58/EC as applied in national law). Every such e-mail contains an unsubscribe link, and you can object at any time by writing to privacy@coinetic.io. Once you have unsubscribed or are on Brevo's block list, our server does not add you to the list again - it checks this before every update. Customers are not added to our newsletter (section 6b) unless they sign up for it themselves.

Contact for security and licence notices (optional). FastSpring only tells us who paid. If you bought through a reseller, that is the reseller - so a licence can carry one optional contact of the customer who uses it: an e-mail address and, if given, a name, company and country. It can be given in two ways: by you in Coinetic (Help › License › "Contact for security and licence notices"), or by your reseller when buying the licence for you - the reseller confirms to us that you agree (partner terms). Your own entry always replaces the reseller's. We use this contact only for important notices about Coinetic: security issues and updates of the product you use, and licence and renewal information - never for our newsletter, unless you sign up for it yourself, and never to sell to you directly in place of your reseller. Once the licence is paid, the contact is kept on our customer list at Brevo like any customer (see above) with the details of the licence (plan, number of computers, status, renewal date), the country and - for a reseller sale - which reseller you bought from; Brevo's unsubscribe and block list are respected in the same way. Legal basis: our legitimate interest in warning the users of our software about security issues and informing them about their licence (Art. 6(1)(f) GDPR) and, where you are our contracting party, the contract (Art. 6(1)(b) GDPR). To change or remove it: in Coinetic, Help › License - change the address, or click Remove (clearing the field); or write to privacy@coinetic.io. A removed contact is taken off the list at Brevo, and a reseller cannot enter it again. The address is shown in full only on a computer registered to the licence; anywhere else it is masked.

Partners: if your partner application is approved, we keep your name, e-mail address, company, country, partner code, partner type and status on a partner list at Brevo, to send you partner communications under the partnership agreement (Art. 6(1)(b) GDPR). If the partnership is rejected or ended, you are removed from that list. Applications that are still pending are not added.

7. Recipients and transfers outside the EU

We use these processors: our server hosting provider (our license and AI server), Cloudflare (website hosting, Turnstile bot check), Brevo / Sendinblue SAS, France (newsletter, customer and partner e-mails), providers of AI models (AI answers; may be located outside the EU/EEA, e.g. in the USA), Google (e-mail), FastSpring (payments, as independent controller). Where data goes to countries outside the EU/EEA without an adequacy decision, the transfer is covered by the EU Standard Contractual Clauses or the EU-U.S. Data Privacy Framework. We do not sell or rent personal data.

8. How long we keep data

Data	Kept
License and computer records	For the life of the license, then 12 months
Usage records (license checks, AI questions - without text)	12 months
Trial records (computer ID, IP address)	3 years - needed to enforce the trial limits (per computer and per internet connection)
AI conversations	30 days
Unlock from my phone: unlock records (IP address, country, ports, time)	30 days; the phone's registration (public key, name) until you remove it in Coinetic
Bug reports and feature requests	Until resolved, then 24 months
Attack statistics	Per computer 13 months; afterwards only as totals without a computer ID
Newsletter subscription	Until you unsubscribe; then the address is kept only on a block list, so it is not mailed again
Customer and partner e-mail lists (Brevo)	Customers: while you are a customer and afterwards with your status, until you unsubscribe, object or ask us to delete your data; an unsubscribe is recorded so that you are not added again. Partners: for the duration of the partnership
Contact for security and licence notices	Until you or your reseller change it, or you remove it; deleted with the licence record. A removal is kept as an empty entry (so a reseller cannot set it again)
Invoices and payment records	As required by tax law (held by FastSpring and, where applicable, by us)

9. Security

All connections between Coinetic and our server are encrypted (TLS). Each computer receives its own secret token; licenses are digitally signed. Access to our server is restricted to authorised staff.

10. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interest (Art. 15-21 GDPR). Write to privacy@coinetic.io. You may also complain to a data protection supervisory authority, in particular in your country of residence or the Data Protection Authority of the Principality of Liechtenstein (Datenschutzstelle).

11. Changes

We will update this policy when Coinetic changes what it sends. The date at the top shows the current version.