Privacy Policy
Last updated: May 2026
The short version
- Zero telemetry.The CtrlLens extension (VS Code & Cursor) sends no analytics, crash reports, or usage data. It only contacts our servers to activate and periodically refresh a paid license.
- Your PLC projects never leave your machine. We never read, upload, or index your L5X files, ladder logic, tags, or any project content.
- Free features need no account. If you only use free features, we have no record of you at all.
- Paid accounts store only the essentials — your email, a securely hashed password, an anonymous device fingerprint, and billing records.
What we collect
Only when you create an account, buy a license, or activate the extension:
- Account — your email, an optional name, and a securely hashed password (never stored in plain text).
- License activation — an anonymous device fingerprint (
machine_id). It is a one-way value we cannot reverse to identify your hardware; we only use it to confirm the same device is refreshing the license. - Billing — order IDs, amounts, and dates from our payment processor. Card details are handled entirely by the processor and never reach our systems.
- IP address — recorded on login and activation for rate limiting and abuse prevention, then discarded after 90 days.
- Security audit logs — for sensitive actions such as login, activation, and admin changes. Retained for 2 years.
What we never collect
- L5X contents, ladder logic, tags, or project structure
- Usage analytics, feature telemetry, or crash reports
- Website browsing behavior (no third-party analytics)
- Tracking cookies or advertising identifiers
Third parties
We share the minimum necessary with a small set of service providers, each contractually limited to serving you on our behalf:
- Payment processing — Dodo Payments (our Merchant of Record), with Stripe as a backup.
- Transactional email — to deliver licenses and account notices. We never send marketing email.
- Cloud hosting & database — reputable infrastructure providers that store your account and billing data.
Your rights (GDPR / CCPA)
Email [email protected] at any time to access or delete your personal data. We erase your email, name, and IP records; billing and audit records are kept only as long as the law requires, with personal identifiers stripped.
Contact
Privacy questions or data requests: [email protected]