Privacy notice

Last updated August 28, 2026

This notice explains how Stonewatch (“Stonewatch,” “we,” “us,” or “our”), based in Vaughan, ON, Canada, processes personal information when you visit getstonewatch.com, join the waitlist, preorder or use a Stonewatch Home license, contact support, or make a privacy request.

For privacy and legal questions or to exercise a privacy right, email privacy@getstonewatch.com. For product and license-delivery support, email support@getstonewatch.com.

Contents

1. Information we process
2. Why we use it
3. Service providers and Paddle
4. Cookies and similar storage
5. Retention
6. International processing
7. Security
8. Your choices and rights
9. Children
10. Changes and contact

1. Information we process

Website and waitlist

If you join the waitlist, we store the email address you submit, submission time, a source label, and your browser’s user-agent string. Cloudflare receives request IP, browser/device signals, and ordinary security and delivery metadata when it serves the site. Cloudflare Turnstile processes a response token and device or interaction signals to detect automated abuse. We do not run advertising pixels or a separate behavioral analytics service on this site.

Pricing and preorder

The pricing page sends the selected quantity and public catalog identifiers to Paddle. Paddle may use your IP-derived location to preview the price that checkout will show. If you open checkout, Paddle collects the preorder and transaction information it needs, which may include your name, email, billing address, country, tax or business details, payment method, device and fraud-prevention information, product, quantity, discount, tax, total, and transaction status.

Paddle provides Stonewatch with signed customer and transaction events needed to fulfill and reconcile your order. These include customer email and status; Paddle event, customer, transaction, item, discount, and adjustment identifiers; product and price; quantity; currency; subtotal, discount, tax, and total; timestamps; and refund or dispute state. Stonewatch does not receive or store your complete payment-card number or security code.

Fulfillment, email, and support

Our fulfillment ledger stores internal purchase and entitlement identifiers, a nonsecret support reference, provider references, transaction amounts, job and delivery states, refund/dispute outcomes, and audited operator actions. The purchaser email and activation credential are encrypted at the application layer. An email lookup value is keyed-hashed. Resend receives the destination email and the message content—including the activation credential when a license is delivered—and returns message and delivery-status identifiers.

If you contact us, we process your sender address, correspondence, preorder or transaction email, support reference, verification evidence, case reference, reason code, and the inspected license state needed to answer or safely perform a binding reset or credential rotation. Stonewatch support will never ask you to send an activation credential.

License activation and validation

When you activate Home, your recorder derives a pseudonymous machine fingerprint by hashing stable local machine information. It sends the activation credential and that fingerprint to our self-hosted Keygen authority. The authority processes internal entitlement and generation references, product metadata, license and binding identifiers, the pseudonymous fingerprint, status, and activation/validation/deactivation times. The recorder stores its credential, fingerprint, binding ID, tier, and recent validation state locally. Licensing does not send camera names, footage, recordings, detections, or your recorder login information.

Logs and recovery copies

Infrastructure providers may record request time, route, response status, source IP, and security metadata. Stonewatch application logs use outcome codes and nonsecret operational identifiers and are designed not to log raw Paddle/Resend bodies, customer values, or activation credentials. Encrypted Keygen database backups and encrypted fulfillment D1 exports contain the corresponding licensing records so that service can be restored after a failure.

2. Why we use information

Depending on your location and relationship with us, we process information:

• to take steps you request and perform the product and license agreement, including fulfillment, email delivery, activation, validation, deactivation, refunds, revocation, and support;
• with your consent when you voluntarily join the waitlist or where consent is otherwise required;
• for legitimate interests such as securing the site, preventing replay, fraud and abuse, maintaining reliable backups, debugging failures, reconciling provider state, and keeping a proportionate audit trail; and
• to comply with tax, accounting, consumer-protection, legal-process, and other legal obligations, or to establish and defend legal claims.

We do not sell personal information or share it for cross-context behavioral advertising.

3. Service providers and Paddle

• Cloudflare serves the website and provides Turnstile, edge security, Workers, D1, and private R2 backup storage.
• Paddle is the authorized reseller and Merchant of Record for paid preorders and later purchases. Paddle handles checkout, payment, applicable tax, receipts/invoices, buyer payment support, and refunds under its own Buyer Terms, Privacy Notice, and Refund Policy.
• Akamai/Linode hosts the self-managed Keygen, PostgreSQL, Redis, and supporting licensing services.
• Resend delivers waitlist, license, support, and operational email and reports delivery events.
• Our email and administrative-security providers receive support/privacy correspondence or protect operational credentials and recovery material where necessary.

We may also disclose information when required by law, to protect rights and safety, to investigate abuse, or as part of a genuine business reorganization subject to appropriate safeguards. Each provider may keep its own security, transaction, and compliance records under its terms and legal duties.

4. Cookies and similar storage

Stonewatch does not use advertising cookies. Cloudflare may use essential cookies or similar signals for security and Turnstile. Paddle.js and Paddle Checkout may use browser storage or cookies needed for price preview, checkout, fraud prevention, and payment. Blocking essential storage may prevent those features from working.

5. Retention

We keep waitlist information until the beta announcement and related list administration are complete or you ask to leave. We keep purchase, entitlement, refund, delivery, support, and operator-audit records for as long as needed to operate and support the perpetual license, secure and reconcile the service, resolve disputes, and meet tax, accounting, or other legal obligations. We delete or de-identify information when those purposes no longer require it, subject to locked backups and provider-controlled retention.

Encrypted Keygen recovery points are retained on a six-hour cadence for 14 days, daily for 60 days, and monthly for six months. Daily encrypted fulfillment D1 exports are retained for 60 days. The latest six encrypted monthly recovery packages are also kept in protected local/offline storage. Deletion from an active system may therefore take time to age out of protected backups.

6. International processing

The providers above operate infrastructure and personnel in multiple regions. Information may therefore be processed outside the region where you live. Where required, we and our providers use contractual or other lawful transfer safeguards. Local laws may allow courts, regulators, or authorities to access information in those locations.

7. Security

We use measures designed for the sensitivity of the information, including signed provider webhooks, strict catalog and amount validation, encrypted customer email and activation credentials, keyed-hashed email lookup, authenticated operator workflows, separated Production and Sandbox systems, restricted secrets, client-side encrypted backups, and audit/replay controls. No transmission or storage system is completely secure. Keep your activation credential private and contact support promptly if you believe it is compromised.

8. Your choices and rights

You may ask to access, correct, delete, restrict, or receive a portable copy of personal information, or object to certain processing, where applicable law grants that right. You may withdraw consent without affecting earlier lawful processing. You may also complain to the privacy or data-protection authority where you live.

Email privacy@getstonewatch.com. Tell us the request and the email or support reference needed to locate the relevant record. We may verify your identity and authority before acting. Some transaction, security, fraud, backup, and legal records cannot be deleted immediately or may need to be retained. Paddle controls privacy requests for the payment and buyer records it processes independently; use Paddle’s privacy channels for those records.

9. Children

The website and paid license are not directed to children, and we do not knowingly collect personal information from children below the age at which they may consent to this processing in their location. Contact us if you believe a child submitted information.

10. Changes and contact

We may update this notice when the product, providers, or law changes. We will update the date above and provide additional notice when required. Material changes do not retroactively reduce rights required by law.

Stonewatch
Vaughan, ON, Canada
privacy@getstonewatch.com