Privacy Policy

Last Updated: October 14, 2026

1. Introduction

ExtraDock values privacy and commits to protecting personal data. This policy explains what information is collected, how it is used, the choices available to you, and the measures used to protect it. Where consent is required, using the website or app does not replace an explicit consent choice.

2. Information We Collect

The company gathers several data types:

• Personal Information: Name and email provided during purchases, newsletter subscriptions, or inquiries
• Payment Information: Processed through Stripe; full credit card details are neither stored nor accessed by ExtraDock
• Device Information: IP address, browser type, operating system, and referral URLs
• Marketing Attribution Identifiers: Click identifiers and promotion codes from tracked marketing links used to attribute purchases and refunds to the link, campaign, or partner that introduced you
• Usage Data: Website and app interaction patterns, including analytics on pages visited and device types
• Referral Survey: The selected source and optional free-text answer. Tracking reports use only the selected source and an opaque submission identifier, never the free text.
• Cookies and Tracking Technologies: Small data files enabling functionality improvements and user preference storage; users may disable these via browser settings
• Diagnostic and Error Data: Technical information automatically collected when the app or website encounters an error, such as stack traces, error messages, device and operating system version, and app version. This data helps identify and fix bugs.

3. How We Use Your Information

Data is utilized to:

• Process purchases and deliver license keys and receipts
• Provide customer support and respond to inquiries
• Send product updates and newsletters (only for subscribers)
• Enhance website services through analytics
• Attribute purchases and refunds to the marketing link, campaign, or partner that introduced the customer
• Ensure legal compliance and prevent fraud
• Diagnose errors, monitor stability, and improve app reliability

Marketing emails include unsubscribe options.

Depending on the processing and your location, ExtraDock relies on consent, performance of a contract, compliance with legal obligations, or legitimate interests such as measuring and improving the website and attributing marketing. Where optional storage requires prior consent, that storage remains off until consent is given. Where ExtraDock uses a regional default based on legitimate interests, you can object or turn it off at any time through Privacy Choices.

4. How We Store and Protect Your Data

Reasonable technical and organizational measures protect information from unauthorized access. Payment data is handled by Stripe per its security standards. Optional website processing is grouped into Analytics, Attribution, Experience, and Advertising purposes. Google Tag Manager and Google Analytics provide audience measurement; DataFast provides first-party browser analytics, including returning-visitor and journey measurement, and, when permitted, one server-delivered referral-survey goal; LnkFlow provides journey attribution and checkout decoration; Meta Pixel provides permitted advertising measurement and retargeting; Reddit Pixel provides permitted advertising measurement and click attribution; Reddit's Conversions API receives separately controlled, server-delivered attributed Purchase events; and Hotjar provides experience analytics and session replay on approved public routes. DataFast's native Stripe connection and the existing Stripe-to-LnkFlow destination remain unchanged, and LnkFlow remains the only Meta server-side Purchase sender. ExtraDock's separate Reddit integration does not send browser Purchase or refund events and does not create a second Meta sender. Diagnostic and error data is processed through Sentry (Functional Software, Inc.) solely for debugging and stability monitoring. All third-party processors are bound by data processing agreements, and data may be transferred outside the EEA under appropriate safeguards (e.g., Standard Contractual Clauses).

When enabled and Advertising is permitted by your choice or the configured regional default, OpenAI Ads measurement sends page views and starts of dedicated ExtraDock checkouts through the OpenAI Measurement Pixel. The Pixel may store an OpenAI click reference in the __oppref cookie for 30 days and a browser reference in __obref for up to 365 days. An encrypted, HTTP-only first-party cookie named ed_openai_owner links this browser to its records for up to 30 days and is created only after Advertising permission. With an OpenAI click reference and an ExtraDock tracking reference, we store an encrypted click association and consent evidence for up to 30 days. After Stripe confirms payment, our server may report one order_created event to OpenAI with the original click reference, payment time, actual amount paid, currency, ExtraDock offer, thank-you page URL, and a stable Stripe Checkout Session identifier. Our server integration does not send names, email addresses, payment card details, IP addresses, or user agents. When automatic advanced matching is enabled in the OpenAI data source settings, the consented Pixel may detect supported customer information in website forms, normalize it, and send SHA-256 hashes; raw customer information is not sent through that feature. Our implementation does not manually supply customer information to the Pixel. These events opt out of future user-level personalization. Purchases are never reported by the browser. Advertising remains off before your choice in configured strict regions. In other regions and when location is unknown, enabled Advertising services are on by default. Global Privacy Control prevents this processing. Withdrawal stops further events, clears the OpenAI cookies, and removes stored associations for the current browser before queued purchases are delivered. See OpenAI's Privacy Policy for information about OpenAI's processing.

5. Data Retention

Personal information is retained only as needed for stated purposes. Privacy choices expire after the configured consent period, LnkFlow attribution cookies are configured for up to 90 days, and a consented Reddit click association expires after up to 90 days. Provider-side analytics, advertising measurement, or replay follows the approved account retention settings. The DataFast delivery ledger stores an HMAC business-key hash and delivery status rather than the original referral identifier. Financial and conversion-delivery records may be retained for statutory accounting and operational reconciliation periods. Users may request deletion at support@appitstudio.com.

6. Your Rights (GDPR Compliance)

Where the GDPR applies, individuals may:

• Access, correct, or delete personal data
• Withdraw marketing consent anytime
• Request data portability or processing restrictions
• File complaints with local data protection authorities

Contact support@appitstudio.com to exercise these rights.

7. Cookies

Necessary storage supports security, sessions, and privacy choices. Optional services are grouped into Analytics, Attribution, Experience, and Advertising purposes. The website obtains its regional privacy context at runtime from a trusted Cloudflare country signal; cached public HTML does not contain a visitor-specific privacy decision. Global Privacy Control overrides every optional regional default, and a permanent privacy preference control is available in the footer.

In Europe and other regions configured for strict opt-in, including Brazil, Canada, China, South Korea, Singapore, Thailand, and Vietnam, DataFast, Google Tag Manager/Google Analytics, LnkFlow persistent storage, Meta Pixel, Reddit Pixel, OpenAI Ads measurement, and Hotjar remain off until you grant the relevant permission. DataFast then uses first-party visitor and session identifiers so visits can be connected into returning-visitor journeys. Rejecting or withdrawing a purpose stops its optional services and clears applicable cookies.

In known regions not configured for strict opt-in, enabled Analytics, Attribution, Experience, and Advertising services run by default without requiring a consent-banner action. This includes DataFast, Google Tag Manager/Google Analytics, LnkFlow persistent attribution, Meta Pixel, Reddit Pixel, OpenAI Ads measurement, and Hotjar where enabled. These regional defaults can be rejected or changed at any time through Privacy Choices.

If the country signal is missing, invalid, a Tor code, or cannot be trusted, enabled Analytics, Attribution, Experience, and Advertising services also run by default. The privacy notice explains these defaults and lets you reject or customize them. We do not infer location from your time zone or browser settings. Saved privacy choices and Global Privacy Control override these defaults.

When a tracked link brings you to our website, LnkFlow temporarily reads the lnk_id click identifier and any lnk_promo promotion code into browser memory. This memory-only attribution does not write to your device. If you open a dedicated ExtraDock checkout during that visit, the click identifier may be passed to Stripe as a client_reference_id. Shared Appit Studio bundle checkout links remain unchanged and are attributed by Appit Studio.

When Attribution storage is permitted, including through an approved non-strict regional default, LnkFlow stores these identifiers in first-party cookies for up to 90 days so attribution can survive navigation and return visits. Declining storage does not remove the memory-only reference from a dedicated checkout link you choose to open during the current page visit. Stripe reports completed purchases and refunds to LnkFlow so we can measure campaign performance and calculate any applicable partner commission.

When Advertising is permitted by your choice or the configured regional default, Meta Pixel loads and sends a browser PageView for advertising measurement and retargeting and may use the _fbp and _fbc cookies. For an attributed purchase, LnkFlow may send one server-side Purchase event to the configured Meta dataset only when the selected touchpoint contains the required Advertising permission. ExtraDock does not send a second browser Purchase event. Rejecting or withdrawing Advertising prevents these Meta events and clears the applicable Meta cookies, without disabling the cookieless lnk_id handoff to Stripe or ExtraDock's internal campaign attribution.

When both Attribution and Advertising are permitted by your choice or the configured regional default, a dedicated ExtraDock checkout reached from a Meta ad may use a short-lived reference to connect the purchase to that specific permitted visit. Regional permission is recorded separately from an explicit consent choice. The reference contains no name, email address, or payment details and is valid for a purchase completed within 24 hours of its creation. LnkFlow checks the associated permission again before sending the Meta Purchase event. Withdrawing either permission invalidates the reference for future Meta delivery.

When Advertising is permitted by your choice or the configured regional default, Reddit Pixel loads and sends a browser PageVisit for advertising measurement and may use the _rdt_uuid and _rdt_cid cookies together with page, referrer, and Reddit click information. When a Reddit ad supplies a valid rdt_cid and the visit also has a valid ExtraDock lnk_id, ExtraDock stores their association, the selected offer type, and consent evidence in encrypted first-party records for up to 90 days. If Stripe later confirms a paid Checkout Session carrying that allowlisted ExtraDock reference, ExtraDock may send one server-side Purchase to Reddit's Conversions API containing the Reddit click identifier, event time, thank-you page URL, currency, value, one ExtraDock software product line, and the Stripe Checkout Session ID as a stable conversion identifier. Reddit Purchase is never sent from the browser, and this separate integration does not change LnkFlow's ownership of Meta Purchase delivery. Rejecting or withdrawing Advertising prevents Reddit Pixel loading, clears applicable Reddit cookies, and removes the stored Reddit click association for the current ExtraDock click. See Reddit's Privacy Policy for information about Reddit's processing.

When the DataFast service is permitted and DataFast server goals are enabled, a committed referral-survey submission may produce one purchase_referral_survey_completed goal containing only the selected source. This goal is not a purchase, sale, payment, refund, revenue event, or proof of Stripe attribution. DataFast identity and application-side server payments remain disabled.

When Experience is permitted and Hotjar is enabled, session replay is limited by route exclusions and suppression settings intended to keep account, authentication, privacy, checkout, thank-you, API, webhook, Livewire, and other sensitive paths out of replay. Hotjar Identify, User Attributes, surveys, console capture, and iframe capture are not enabled by this website integration.

If you reject all optional processing, DataFast stops, LnkFlow does not persist attribution identifiers, and Google Tag Manager, Google Analytics, Meta Pixel, Reddit Pixel, and Hotjar remain off. Withdrawal clears applicable Analytics, Attribution, Advertising, and Experience cookies and removes any consented Reddit click association for the current ExtraDock click. Memory-only checkout attribution remains available for dedicated ExtraDock links because it does not store or read information from your device. A Global Privacy Control signal suppresses every optional service, including DataFast and all regional defaults. You can accept, reject, customize, or later withdraw optional processing through Privacy Choices in the footer.

8. Third-Party Links

External links on the website fall outside the company's responsibility. Users should review third-party privacy policies before sharing information.

9. Updates to This Policy

Changes will be posted with updated dates. The "Last Update Date" reflects current versions.

10. Contact Us

For privacy inquiries: support@appitstudio.com