Privacy Policy
Coinetic protects your computers. It sends us only what it needs for your license, for the features you use and for support - and never your firewall log, your traffic or your files unless you send them to us yourself.
Last updated: 25 October 2026
- Your firewall log, connections, rules and bans stay on your computer.
- For the license, Coinetic sends the license key, a computer ID (a one-way hash, not your hardware serial), the computer name, the Windows and Coinetic version and - by the nature of the internet - your public IP address.
- When you use Ask AI, your question and the Coinetic context you see under "Context from Coinetic" go to our AI service and to the AI provider behind it.
- Bug reports contain only what you tick in the report window, and you can preview them before sending.
- Attack statistics are counts only (blocked, retries, bans). You can switch them off.
- Payments are handled by Paddle.com; we never see your card.
- We do not sell data, do not advertise, and use no tracking cookies.
1. Who is responsible
The controller for the processing described here is:
Salus Alpha Group AG, Industriestrasse 56, 9491 Ruggell, Liechtenstein
E-mail: privacy@coinetic.io - full details in the Imprint.
2. What Coinetic sends, and why
Coinetic runs on your computer. Everything it shows - firewall log, connections, open ports, rules, failed logins, bans, VPN users, web server requests - is processed locally and is not sent to us. Coinetic contacts our server (relayer.coinetic.io) only for the purposes below.
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| License check (at start and about every few hours) | License key; computer ID (SHA-256 hash of the board's UUID and Windows' machine ID); computer name; Windows and Coinetic version; public IP address; time | Contract (Art. 6(1)(b)) - to deliver the licensed software and enforce the number of computers |
| Free trial | Computer ID, computer name, public IP address, time | Legitimate interest (Art. 6(1)(f)) - one trial per computer and internet connection, to prevent abuse |
| Ask AI (Pro + AI and trial) | Your question; the context Coinetic adds (shown in the chat under "Context from Coinetic" - e.g. a log line, an IP address and its owner, a rule, a user name from a failed login, this computer's Windows version and installed tools); and, if "Let the AI look up more data" is ticked, the read-only Coinetic data the AI requests while answering | Contract (Art. 6(1)(b)) |
| Bug report / feature request | What you write; your contact address if you enter one; and only if ticked: the recent protection log, the self-test report, a screenshot of the Coinetic window (never the desktop); plus license key, computer ID and name, versions, IP address | Contract / legitimate interest in fixing faults (Art. 6(1)(b), (f)) |
| Attack statistics | Counts per hour: inbound connections blocked, retries of banned attackers, bans by kind - no addresses, no names, no log content; linked to the computer ID so that only licensed installations count | Legitimate interest (Art. 6(1)(f)) - the public live numbers on coinetic.io. Switch off: Help › License › "Share anonymous attack statistics" |
Other lookups Coinetic makes from your computer: to show who owns an address, Coinetic queries public internet registries (RDAP / WHOIS) with that address only. It checks program signatures with Windows' own functions.
Names stay on your computer. Before anything is sent to the AI, Coinetic replaces user names, e-mail addresses and people's names with placeholders (USER-1, USER-2 ...); the answer shows the real names again on your screen only. IP addresses and generic account names that attackers try (administrator, root ...) remain visible, because the AI needs them to judge an attack. You can switch the replacement off under Help › AI relay service.
Data in the AI context may relate to other people - for example the IP address of someone who tried to log on to your Server or PC. You decide what you ask; we process it only to answer you.
3. The AI service
Questions are answered by AI models of specialised third-party providers, which process them on our behalf as processors under a data processing agreement. We may use several providers and change them; some of them are located outside the EU/EEA, for example in the USA (see section 7). We only use providers that are contractually not allowed to use your questions to train their models. The AI can only read Coinetic data; it cannot change anything on your computer.
To allow follow-up questions, a conversation is kept on our server for 30 days and then deleted. Our license database records only that a question was asked (time, computer, success) - not its text.
4. Payments
Purchases are made through Paddle.com, our online reseller and merchant of record. Paddle collects and processes your payment and billing details under its own privacy notice. We receive from Paddle your name, e-mail address, country, the plan, number of computers, price and subscription status, so we can switch your license accordingly. We never receive your card details.
5. This website
- No tracking, no analytics, no advertising cookies.
- This website is hosted by Cloudflare, Inc. Cloudflare processes your IP address and the page requested to deliver the site and protect it against attacks (Art. 6(1)(f)); we do not receive these access logs.
- Fonts are loaded from Google Fonts (Google Ireland Ltd.); your browser connects to Google's servers for this.
- The live numbers are read from our own server (
relayer.coinetic.io/stats.json) - totals only. - On the buy page, Paddle's checkout (
cdn.paddle.com) is loaded to process the payment; Paddle may set cookies needed for the checkout.
6. Partner program
If you sign up as a partner, we process your name, company, e-mail address, country, VAT ID, bank account and a password hash to run the program and pay commissions (Art. 6(1)(b) GDPR), and keep payout records as required by tax law. Your partner session lives only in your browser tab. When a visitor comes through a partner link, the partner code is passed on in the page address and counted once per visit; nothing is stored in the visitor's browser for this. If you buy with a partner code, that partner sees the sale (date, plan, amount) without your name; a reseller who bought a license for you sees that license with your name.
6a. E-mail and support
When you write to us, we use your message and address to answer. Our e-mail is hosted by Google Ireland Ltd. (Google Workspace).
6b. Newsletter
If you subscribe on coinetic.io or in Coinetic (Help › Subscribe to the newsletter), we use your e-mail address to send you our newsletter, about once a month: security news, new Coinetic features and tips. You only receive it after you confirm the link in our confirmation mail (double opt-in). We record the time of sign-up and confirmation and where you subscribed, as proof of your consent. Legal basis: your consent (Art. 6(1)(a) GDPR).
You can unsubscribe at any time with the link in every newsletter or by writing to privacy@coinetic.io; this does not affect the lawfulness of mailings before. The newsletter is sent by Brevo (Sendinblue SAS, France) on our behalf; Brevo also records whether a newsletter was opened or a link clicked, so we can improve it. Your address is not shared with anyone else.
7. Recipients and transfers outside the EU
We use these processors: our server hosting provider (our license and AI server), Cloudflare (website hosting), Brevo / Sendinblue SAS, France (newsletter), providers of AI models (AI answers; may be located outside the EU/EEA, e.g. in the USA), Google (e-mail, website fonts), Paddle (payments, as independent controller). Where data goes to countries outside the EU/EEA without an adequacy decision, the transfer is covered by the EU Standard Contractual Clauses or the EU-U.S. Data Privacy Framework. We do not sell or rent personal data.
8. How long we keep data
| Data | Kept |
|---|---|
| License and computer records | For the life of the license, then 12 months |
| Usage records (license checks, AI questions - without text) | 12 months |
| Trial records (computer ID, IP address) | 3 years - needed to enforce one trial per computer and connection |
| AI conversations | 30 days |
| Bug reports and feature requests | Until resolved, then 24 months |
| Attack statistics | Per computer 13 months; afterwards only as totals without a computer ID |
| Newsletter subscription | Until you unsubscribe; then the address is kept only on a block list, so it is not mailed again |
| Invoices and payment records | As required by tax law (held by Paddle and, where applicable, by us) |
9. Security
All connections between Coinetic and our server are encrypted (TLS). Each computer receives its own secret token; licenses are digitally signed. Access to our server is restricted to authorised staff.
10. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interest (Art. 15-21 GDPR). Write to privacy@coinetic.io. You may also complain to a data protection supervisory authority, in particular in your country of residence or the Data Protection Authority of the Principality of Liechtenstein (Datenschutzstelle).
11. Changes
We will update this policy when Coinetic changes what it sends. The date at the top shows the current version.