This Privacy Policy explains what data the Interactive Hud software ("Software") processes and why. The data controller is ValenorEye, Lda. ("ValenorEye", "we", "us"). Contact: info@interactivehud.com.
1. What we process and why
| Data | When | Purpose | Lawful basis (GDPR) |
|---|---|---|---|
| License key (you enter it) | Activation | Validate and unlock your purchase | Performance of contract |
| Hardware identifier (HWID) — a SHA-256 hash (a pseudonym) of a Windows machine identifier: a random value Windows creates when it is installed or, on the rare PC where that cannot be read, the computer name and user name. We never receive the identifier itself | Activation and periodic license checks | Bind the license to your device and prevent abuse/piracy | Legitimate interest |
| Motherboard identifier — a SHA-256 hash (a pseudonym) of the motherboard's SMBIOS UUID (only when the board reports a real one). On some brands that UUID is built from the computer's serial number: the hash does not show the serial, but someone who already knew your serial and held a copy of our database could confirm the match — one more reason the database is kept only where section 3 says | Activation and periodic license checks | Tell apart two machines that share a cloned disk, so that one license runs on one PC; a license stays on a motherboard for at least 90 days (counted from the first time that motherboard is registered, or from the last move) before it can move to another, and never goes back to one it has already left; after a request for erasure, only one-way fingerprints of this history remain (section 4) | Legitimate interest |
| IP address | When the app, the thank-you page or the download link contact our licensing or update server | Network communication; abuse prevention | Legitimate interest |
| App version / update request | Update checks — the app looks for updates on its own when it starts and about once a day while it runs, and installs them only when you say so | Deliver the correct update | Legitimate interest |
| Your name and email address — given to Link at checkout and passed to us | When you buy a licence | Create your licence, email you the key, and support your purchase | Performance of contract |
| Order reference, amount, tax and the country of your billing address | When you buy a licence | Issue the licence and keep the accounting record of the sale | Legal obligation |
| Whether the licence email reached you — delivered, bounced or marked as spam | After your purchase | Make sure the key you paid for actually arrived, and re-send it if it did not | Performance of contract |
| Your email address and what you write to us — support questions, refund or data requests, replies to your licence email, and requests to be told when Interactive Hud goes on sale (the “Notify me at launch” button) | When you email us | Answer you and deal with what you asked; for a launch notice, write to you once, on the day sales open | Legitimate interest (answering you); for the launch notice, your request (consent), which you can withdraw at any time |
| Discord status (optional, off by default) — the name of the game, your session grade and when the session started | Only while you have it turned on in the app’s settings | Show what you are playing on your Discord profile. The app hands it to the Discord app on your PC; it never passes through us | Your choice (consent) — turn it off at any time |
Apart from the purchase details and the emails above, we do not collect your precise location, browsing history, personal files, sensor readings, or any usage analytics. We never see your payment details: your card or wallet details go to Stripe and never reach us. Hardware sensor readings and the local activity diary described in section 2 stay on your computer and are never transmitted. The in-app diagnostic export is generated and shown locally; nothing is sent to us unless you choose to send the file yourself for support.
2. Local activity diary (stays on your device)
To power features such as the Panel, session reports and the "invisible session" history, Interactive Hud keeps a local diary of your PC's activity on your own machine. Depending on the features you use, this can include:
- Sessions — each stretch from power-on to shutdown: uptime, and (while gaming) average and 1% low FPS, temperatures, power draw and an estimated energy cost;
- System changes read from Windows — software you install or remove, Windows updates, new or updated device drivers, and BIOS/operating-system milestones;
- Reliability events read from the Windows Event Log — unexpected shutdowns, crashes (including BSOD/WHEA) and disk warnings;
- Hardware baseline — your components' factory specifications (for example rated memory speed and power limits) and how they behave over time, used for your machine's "ID card".
All of this is stored only on your computer, in your local application-data folder. It is never uploaded to us or to anyone else, is not used for analytics or advertising, and stays on the device whether the overlay is visible or hidden. You can clear it at any time by deleting the app's data folder or uninstalling the Software.
3. Where the data goes
- Licensing/update server operated by ValenorEye and hosted in Frankfurt, Germany (EU). It validates keys, records the activation (key ↔ HWID), keeps the purchase record, and serves updates. Every 6 hours its database is copied to a ValenorEye device in Portugal, where the 7 most recent copies (about a day and a half) and 4 weekly copies are kept unencrypted, together with copies set aside when an integrity check fails and an older copy kept as a cold reserve; before each server update, a copy is also kept on the server itself. From there, a copy encrypted with our public key is stored with Cloudflare R2, so the storage provider cannot read it. For disaster recovery, encrypted copies are also kept on offline storage media held by ValenorEye’s partners.
- Tailscale — while older versions of the app still use our previous address, it relays their connections to our server. It sees the IP address and the server name, not the content: the encryption ends on our server.
- Link — Stripe’s merchant-of-record service (Stripe Payments Company or Stripe Technology Europe, Limited), our merchant of record. It is the seller shown on your receipt: it takes your payment, issues your invoice and handles the applicable taxes, under its own privacy policy. We receive only the order details we need — your name, email address, billing country and the amounts charged.
- Resend (Plus Five Five, Inc., United States) delivers the email that carries your licence key, and tells us whether it arrived. This means your name and email address are transferred to the United States; that transfer is covered by the EU Standard Contractual Clauses and the EU–U.S. Data Privacy Framework.
- Zoho Mail (Zoho Corporation B.V., Netherlands) hosts our mailbox, info@interactivehud.com, in its EU data centres. The emails you send us — including replies to your licence email and launch-notice requests — are stored there.
- Discord — only if you turn on the Discord status. The app hands your status to the Discord app on your PC, and Discord shows it on your profile under its own privacy policy. It never passes through us.
- Cloudflare hosts this website — see section 9.
We do not sell or rent your data, and we do not share it with advertisers.
4. Retention
Activation records (license key ↔ HWID, and the motherboard identifiers the activation has used) are kept for as long as the license is active, to support re-activation and abuse prevention, and are deleted on request or when the license is permanently revoked. One exception: when, at your request, we release one of your PCs from a license (to move it to another PC), we keep with the key a one-way fingerprint of that PC’s identifier — computed from the identifier and the key, never the identifier itself — so that the released PC does not take the license back on its own. It stays with the key even after an erasure request, and is deleted when that PC is activated again or the license is permanently revoked. We also keep a note of each release — the date and the reason, never who asked or the PC’s identifier — so that one license cannot be released over and over; it stays with the key for as long as the key exists.
When you ask us to erase your data, we keep, tied to your key, one-way fingerprints of the motherboards your license has used — computed from each motherboard identifier and the key, never the identifier itself. They name no one and cannot be matched to any other license; they exist so that a copy of your disk on another machine cannot take the license from you once your email is gone. They stay with the key for as long as the key exists.
Purchase records — your name, email address, billing country, order reference and the amounts — are kept for 10 years, because Portuguese tax law requires us to keep the accounting record of every sale (article 52 of the Portuguese VAT Code). You can ask us to erase the parts that identify you before that — your name, email address, order reference, and every record of the emails we sent you — and we delete your activation records too (except the one-way fingerprints described above). We do it, and your license key stays valid: the app activates itself again the next time it talks to our server (an older version of the app may ask you for the key again — so keep it before you ask, because afterwards we no longer have your email to send it to you). What remains is only the accounting record the law requires us to keep: the amounts, the tax, the country, and the payment reference we need in case of a refund. That reference points at our payment provider’s own record, which is kept under their policy. In our licensing database, everything that named you is gone, and we also delete our correspondence with you from our mailbox — we keep only your erasure request, as proof that we carried it out. The one exception is the server’s technical access record, which may still hold your order reference, or the identifier of the email we sent you, for up to 30 days. The backups and copies made before your request (section 3) are not edited: the regular unencrypted copies rotate out within about 5 weeks; the others, and the encrypted off-site copies (in cloud storage and on offline media), currently have no expiry date — they are used only to restore the service after a failure.
Emails you send us are kept for as long as we need them to answer you and deal with what you asked (for a purchase, for as long as its purchase record). Launch-notice requests are kept until we have sent that one notice, and then deleted; you can ask us to delete yours at any time before that.
Requests that reach our server — from the app, the thank-you page and the download link — leave a technical access record (IP address, the request and its time) in the server’s system log, used only for security and diagnostics and deleted after 30 days.
The local activity diary (section 2) is kept on your device and is under your control — it is never held by us.
5. Your rights (GDPR / EU)
You have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and to data portability. To exercise these rights, contact info@interactivehud.com. You may also lodge a complaint with your local data-protection authority (in Portugal, the CNPD).
6. Security
Activation tokens are stored on your device protected by the Windows Data Protection API (DPAPI). License tokens are cryptographically signed (ECDSA P-256) and verified offline, so the app can validate your license without constantly contacting our server.
7. Children
The Software is not directed at children under the age required by your local law for consent, and we do not knowingly process their data.
8. Changes
We may update this Policy. The "Last updated" date above reflects the current version. Material changes will be announced through the product or our channels.
9. This website (interactivehud.com)
This Privacy Policy is primarily about the Software. The website itself is a static site hosted on Cloudflare Pages. It runs no analytics and no tracking, and sets no tracking cookies — see our Cookie Policy. As with any website, our hosting/CDN provider (Cloudflare) automatically processes basic technical connection data — such as your IP address and request metadata — to deliver the pages and protect the site against attacks. The lawful basis is our legitimate interest in serving and securing the site.
10. Contact
ValenorEye, Lda. — info@interactivehud.com