Website privacy policy
Last updated: 12 August 2026
This policy covers the flinthive.com website and the handling of purchases and support email. The FormForge Chrome extension is covered separately by the extension privacy policy — in short, the extension makes no network calls and transmits nothing.
Who is responsible
The data controller is MD. ARAFAT UDDIN, trading as FlintHive, Chattogram, Bangladesh. Contact: support@flinthive.com.
What this website collects
Browsing the site: nothing. There is no analytics, no tag manager, no advertising script, no session recording, no fingerprinting and no third-party embed. The site sets no cookies at all — not even "essential" ones — so there is no cookie banner because there is nothing to consent to.
The site is served by Cloudflare Pages. Like any web host, Cloudflare processes connection data such as your IP address, user agent and the URL requested, in order to serve the page and to protect the site from attack and abuse. We do not receive per-visitor reports from this and do not use it to build any profile of you.
What we collect when you buy
Purchases are handled by Paddle.com Market Ltd, which is the merchant of record. You enter your payment details on Paddle's checkout, not on our site. We never see, receive or store your card details.
From a completed purchase we receive and hold:
- your email address,
- the country and, where tax requires it, the region you bought from,
- the order reference, amount and date, and
- the licence key that was issued to you.
We use this to issue and re-send your licence key, to answer support and refund requests, and to keep the accounting records we are required to keep.
What we collect when you email us
If you write to support@flinthive.com we hold your email address and whatever you put in the message, for as long as needed to deal with it and to keep a record of the support history. The contact form on this site has no backend — it opens your own email client and sends nothing to us until you press send in that client.
Legal bases (UK/EU GDPR)
| Purpose | Legal basis |
|---|---|
| Issuing and re-sending your licence key | Performance of a contract |
| Answering your support or refund email | Performance of a contract, or legitimate interests in responding to enquiries |
| Keeping invoice and tax records | Compliance with a legal obligation |
| Serving and protecting the website | Legitimate interests in operating a secure site |
How long we keep it
- Purchase and licence records — kept for as long as the licence is valid and then for the period tax and accounting law requires, which we treat as 6 years from the end of the relevant financial year.
- Support email — kept for up to 24 months after the conversation ends, then deleted.
- Server logs held by Cloudflare — retained under Cloudflare's own retention schedule, which is short and is not under our control.
Who else processes your data
| Processor | What for | Their policy |
|---|---|---|
| Paddle.com Market Ltd | Payment processing, tax calculation and remittance, invoicing, and refunds. Paddle is the merchant of record and an independent controller of the payment data it collects. | paddle.com/legal/privacy |
| Cloudflare, Inc. | Hosting, DNS, TLS and denial-of-service protection for this website, and the worker that signs licence keys. | cloudflare.com/privacypolicy |
| Our email provider | Sending licence keys and receiving support@flinthive.com mail. | Named on request — email us and we will tell you who it currently is. |
We do not sell your personal information, and we do not share it for advertising, profiling or any cross-context behavioural purpose. There is no advertising anywhere on this site and there never will be.
International transfers
We are based in Bangladesh, and our processors above are in the United Kingdom, the United States and elsewhere. If you are in the UK or the EEA, this means your data is transferred outside your region. Those transfers rely on the transfer mechanisms our processors put in place, principally the Standard Contractual Clauses, which are described in their own policies linked above.
Your rights
Depending on where you live, you may have the right to access the data we hold about you, to correct it, to have it deleted, to restrict or object to how we use it, to receive it in a portable form, and to withdraw consent where we relied on it.
If you are in the EEA or the UK (GDPR), all of the above apply, and you may also complain to your local data protection authority.
If you are in California (CCPA/CPRA), you have the right to know what we collect and why, to delete it, to correct it, and not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined by the CCPA, so there is no opt-out to offer.
To exercise any right, email support@flinthive.com. We will respond within 30 days. We may need to confirm you control the email address in question before acting.
Please note we cannot delete records we are legally required to keep, such as invoices for tax purposes. Where that applies we will delete everything else and tell you what was retained and why.
Data held by Paddle in its own right as merchant of record — your billing record — is subject to Paddle's policy, and requests about it should go to Paddle. We will help you make that request if you ask.
Children
This site and our products are aimed at software developers and testers, and are not directed at children under 13. We do not knowingly collect personal information from children.
Security
The site is served over HTTPS. We hold very little data, which is the main protection we can offer: there is no user database, no password store and no account system to compromise.
Changes to this policy
We may update this policy. The "last updated" date above always reflects the current version. If a change materially affects how we handle data we have already collected from you, we will say so here.
Contact
MD. ARAFAT UDDIN, trading as FlintHive
Chattogram, Bangladesh
support@flinthive.com