Privacy Policy

1. Who is responsible

Taleb Jarrar, an individual trading as “Talixel”, based in Jordan, is the data controller. Contact: support@talixel.com.

2. What we collect, and why

When you create an account

• Email address — to identify your account, send you your licence key, and contact you about your purchase.
• Display name, if you sign in with Google and it provides one.
• An account identifier generated by Firebase Authentication.

We never see or store your password. If you sign in with email and password, Firebase Authentication handles it. If you sign in with Google, we receive only your email address and name — never your Google password.

When you buy

• A purchase record: the Paddle transaction identifier, the amount, the currency, the status, your email, and the date.
• Your licence: the key itself, its status, and which purchase it came from.

We never receive your card details. Payment happens entirely inside Paddle, who are the merchant of record. We only learn that a payment succeeded.

When you activate Talixel on a computer

• A device identifier generated on your machine, so the two-device limit can be enforced and so you can remove a device later.
• A device name, taken from your computer’s hostname and operating system — for example DESKTOP-A1B2C3 (win32). On many computers the hostname contains the owner’s name. It is stored only so you can tell your own devices apart on your account page.
• Timestamps of when the device was activated and last seen, so an inactive device can be identified.

When activation is attempted

• The licence key used and the IP address it came from, so that a stolen or guessed key cannot be tested at speed. This is the only place we record an IP address, and these records are deleted within 24 hours.

3. What we deliberately do not collect

• Your artwork. Talixel has no upload feature and no cloud storage. Files are saved to your own disk.
• Usage analytics. There is no analytics or telemetry library in the application or on this website. We do not know which tools you use, how long you work, or what you make.
• Advertising or tracking identifiers. We run no advertising and share nothing with advertisers.

4. Where the app connects

Talixel makes exactly two kinds of network request of its own:

• talixel.com — to check that your licence is valid. This happens when you activate, and once per launch afterwards. If it cannot connect, Talixel keeps working offline.
• GitHub — to see whether a newer version exists and download it. GitHub can see your IP address when this happens, as any website can. We receive nothing from it.

5. Cookies and browser storage

This website sets no cookies of its own, and uses no analytics or advertising cookies. Firebase Authentication stores your sign-in session in your browser’s local storage so that you stay signed in; clearing your browser data signs you out. Paddle’s checkout script, which loads only on the pricing page, may set its own cookies as part of processing a payment.

6. Who else processes your data

We use a small number of providers, each for one job:

We do not sell your data, and we do not share it with anyone beyond the providers above.

7. Why we are allowed to hold it

• To perform our contract with you — your account, purchase, licence and activations. Without these we cannot sell you the software or let you use it.
• Legitimate interest — the short-lived activation-attempt records, to prevent licence theft and abuse.
• Legal obligation — keeping records of sales where tax law requires it.

8. How long we keep it

• Activation attempts, including IP addresses — deleted within 24 hours.
• Device activations — until you remove the device, or your account is deleted.
• Account, licence and purchase records — while your licence is live, since you may need your key at any time. Purchase records may be kept longer where tax law requires.

9. Your rights

You can ask us to show you what we hold, correct it, delete it, or send it to you in a portable form. You can object to processing, and you can withdraw from marketing at any time — though we do not send marketing email at all.

Email support@talixel.com and we will act within 30 days. There is no charge, and no form to fill in.

If we delete your account, your licence goes with it, so we will always confirm before doing anything irreversible. If you are in the EU or UK and think we have handled your data badly, you may complain to your national data protection authority.

10. Children

Accounts are for people aged 16 and over. Younger children are welcome to use Talixel on a device licensed by a parent or guardian — in that case the account, and the data described here, belongs to the adult. We do not knowingly create accounts for children under 16; if you believe we have, email us and we will delete it.

11. International transfers

Our providers operate globally, so your data may be stored or processed outside your country, including in the United States and the European Union. Each of them offers standard contractual protections for these transfers.

12. Security

Access to the database is closed to the public entirely: every read and write goes through our authenticated server, never directly from a browser. Licence activations are cryptographically signed. We are a small operation and cannot promise perfect security, but we do not hold card details, passwords, or your artwork — which is the best protection available.

13. Changes

If this policy changes, the date at the top changes with it. If a change materially affects what we collect, we will say so on the site rather than quietly editing the page.

14. Contact

Any question about your data: support@talixel.com.

See also our terms of service and refund policy.