Privacy

Privacy policy

Draftpin is a tool for changing where your phone says it is. A policy that was vague about what it collected would be a strange thing to attach to that. So this starts with what never leaves your computer.

Last updated 7 September 2026.

What we never collect

None of the following is transmitted anywhere, by the application or by this site. This is a property of how Draftpin is built, not a promise about how we behave.

• Any location you set, stage, search for or simulate. Not one coordinate.
• Your saved pins, their names, your routes or your recorded walks.
• Anything about the iPhone you connect: its name, its serial number, its UDID, its model or its iOS version.
• Anything you type into the application, including search terms.
• Any identifier created on your computer to recognise it again later.

Who we are

Draftpin is supplied by Draftpin.net, at Suite Ra01, 195-197 Wood Street, London E17 3NU, England. We are the data controller for everything described here. Contact us about anything on this page at george@hgmartist.net.

We are not required to appoint a data protection officer and have not appointed one, which we mention because policies usually stay quiet about it.

If you buy a licence

We hold your email address, the licence key issued to it, the plan you chose, the amount, and the identifiers Stripe gives us for your payment and, if you subscribe, your subscription. We need the email address to send you the key; without it there is no way to deliver what you bought.

We hold this to perform our contract with you. The part of it that is a record of a sale, we also hold to meet our tax obligations, and that copy is kept for six years after the accounting period it falls in. The link between your key and your address is kept for as long as the licence is valid, because a key has to stay verifiable and, if refunded, revocable. For a perpetual licence that means indefinitely.

Your card details never reach us. Stripe collects them and we never see them.

What the application sends

Once every six hours, if you leave it switched on, Draftpin tells us three things: its version, whether it is running on Windows or macOS, and whether the copy is licensed. That is the whole message. It exists so we know how many copies are actually in use and how quickly an update reaches people.

On a paid copy it also sends a short proof that your licence is genuine. It is not your licence key, and your key cannot be recovered from it. We use it to match the running copy to the licence it belongs to, so we can tell how many paid licences are actually being used. That does connect the message to you as a customer, and we would rather say so than describe this as anonymous.

No identifier is created or stored on your computer for this. To count copies rather than messages, our server derives a value from the network address the message arrives from, using a secret that is replaced every night and not kept. Within a day that lets us count distinct copies. Once the secret rotates, the older records cannot be linked back to an address by us or by anyone else.

You can turn this off in Settings, under Privacy, with one click. It stays off, we never ask again, and nothing about the application works differently.

Separately, the application asks our server whether a licence has been revoked. That check sends your licence key, because the question is about that specific key. It happens on a schedule and when you press Check now.

This website

We count visits ourselves, on our own server in the United Kingdom, with no cookie and without storing your IP address. To tell one visitor from another within a day we combine your address and browser into a value using a secret that is replaced nightly. During that day the result is personal data and we treat it as such. After the secret rotates it cannot be reversed.

We do this on the basis of our legitimate interest in understanding how the site is used well enough to improve it. You can object at any time using the cookie settings link in the footer.

We also use Google Analytics, which does set cookies. It is switched off until you accept it and it stays off if you decline or ignore the banner. You can change your mind at any time from the same footer link, and declining after accepting deletes the cookies it set.

Who else sees any of this

• Stripe takes the payment and is the merchant of record. It sees your email and payment details and handles tax and receipts.
• Resend delivers the email carrying your licence key.
• Google receives analytics data, only if you accepted the banner.

Stripe, Resend and Google are outside the United Kingdom. Transfers to them rely on the UK extension to the EU-US Data Privacy Framework where the recipient is certified under it, and on the International Data Transfer Agreement otherwise. Our own analytics stays on our own server in the United Kingdom and is not transferred anywhere.

Your rights

You can ask us for a copy of what we hold about you, to correct it, to delete it, to restrict what we do with it, to object to it, or to have it sent to you in a portable form. You can withdraw consent to analytics whenever you like. Email george@hgmartist.net and you will get a reply from a person.

Some of it we cannot delete on request: a record of a sale has to be kept for tax, and a licence key has to stay linked to the address it was issued to for as long as it works. If you would like the licence ended so the record can go, say so and we will do that.

You have the right to complain to us, and we would like the chance to fix it. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113, and you do not have to come to us first.

Automated decisions

We do not make automated decisions about you that have legal or similarly significant effects. Stripe screens payments for fraud automatically as part of being merchant of record. That is Stripe's processing rather than ours, and we mention it because you would reasonably want to know it happens.

Changes

If this policy changes in a way that matters, the date at the top changes and, where the change affects something you have already bought, we will email you.