Privacy Policy

Last updated: January 10, 2026

We (Golibits - Markus Paintner) assume that you value your privacy and therefore try to handle your personal data with care. As a consequence, unless stated otherwise in this privacy policy, we never sell or share your personal data with others.

The following privacy policy will give you an overview on how and why we process your personal data - upon your use of our website (www.golibits.com; “Website”) or products and associated services (“Services”).

In light of potential future changes to our business or legal requirements, we may need to revise this privacy policy from time to time. The latest version will always be available on this Website, effective upon being posted. Please keep yourself updated about it, as your use of our Website, products and associated services constitutes your acceptance of such.

Controller

Golibits - Markus Paintner, Alfons-Auer-Str. 8, 93053 Regensburg, Germany, (hereinafter: “We”) is the operator of the website https://www.golibits.com and therefore the controller of the personal data of the users (hereinafter: “You”) of the website in terms of the General Data Protection Regulation (GDPR).

Visiting our website

Every time you visit our website, we automatically collect the following information about your computer:

your computer’s IP-address
your browser’s tyoe and version
the request your browser made
date and time of the request
status code of the request
amount of data sent by the request
the website URL from which you accessed our website (referrer)
the website URL you access from our website.

This data is not stored together with other personal data associated with a user account. This data processing takes place for the purpose of detecting and resolving website errors, determining website utilization, detecting potential fraud, as well as improving the website overall.

This processing is essential for running our website, hence we consider the described purpose our legitimate intereset, hence the legal basis for the data processing is Art. 6(1)(f) GDPR. This data will be automatically deleted within no later than 30 days.

Your Golibits account

Upon making your first purchase via our web shop, we will automatically create a personal user account for you. As indicated later on in this privacy policy, our online reseller Paddle.com takes care of the order process. During the checkout step, you will need to enter some purchase related, required personal data, some of which Paddle.com will be sharing with us - namely: your name, email, information on ordered product. This data will become part of your user account, hereinafter referred to as “Account Data”.

To gain access to your user account, you will need to set an initial password via the “reset password” form. At no point in time do we have access to your account’s password.

In the sense of contract fulfillment, your Account Data is processed for creating your purchased product licenses. Furthermore, your user account allows you to (including, not limited to) inspect your current Account Data and update it, inspect your currently obtained product licenses and download them anew, receive special offers and update newsletter subscription status. Processing of Account Data is essential for the performance of your purchase contract with us, hence the legal basis for the data processing is Art. 6(1)(b) GDPR.

Additionally, your Account Data is also used to communicate with you, to determine if you are the rightful holder of one or more valid product licenses and whether you comply with the respective license terms, most notably whether a given product license is not used on more than two (2) devices. The processing of Account Data in this context serves our legitimate interest, hence the legal basis for the data processing is Art. 6(1)(f) GDPR.

We store Account Data for the entire lifetime of a given user account. Your product licenses are tied to your user account. If you want us to delete your user account, it also implies deleting your associated product licenses.

Content Delivery Network

We leverage bunny.net CDN (content delivery network; hereinafter: “BunnyCDN”) for sake of optimizing the performance of our Website by means of caching certain static content.

BunnyCDN does not collect, store or distribute personally identifiable data. You can find BunnyCDN’s privacy policy here: https://bunny.net/privacy.

It’s our legitimate interest to provide an optimally functioning website to our website visitors, hence the legal basis for the data processing is Art. 6(1)(f) GDPR.

Fraud and abuse prevention of licenses

For the sake of license activation, possible revocation and verifying compliance to the conditions laid out in our “End User License Agreement” (EULA), the Software will periodically contact the Golibits license server, sending along certain data - namely:

license key ID (a random identifier associated with your license key),
device ID (a random identifier associated with your device),
device name (the name you gave your device),
operating system version.
Software version,

This data is processed in order to determine whether your use of the given trial period or license key is compliant with our license terms (see “End User License Agreement”). For the sake of performance of your purchase contract with us, the legal basis for the data processing is Art. 6(1)(b) GDPR. For the sake of preventing fraudulent usage of our Software, which we consider our legitimate interest, the legal basis for the data processing is Art. 6(1)(f) GDPR. This data is stored for up to one (1) year after the latest use of the Software. We believe storing this type of indirect personal data for the sake of fraud prevention outweighs the limited impact on your privacy it may have.

Data security

We care about protecting your provided personal data and have taken appropriate technical measures as a result. Most notably, these measures are:

encrypted communication (SSH, SSL, VPN)
application level firewall
hashed user passwords
never sending out your password via email (always set via password reset)

Nevertheless, even with such measures, we can’t realistically guarantee one hundred percent safe processing - be it for inherent technological limitations or network infrastructure that’s in use but outside our control.

Furthermore, it’s also important that you ensure no unauthorized access to your own devices or account login details occurs, as no measures on our end can prevent such unauthorized access.

Third-party service providers

For the sake of our business operations, we are leveraging certain third-party service providers. These third-party service providers have access to your provided personal data only to the extent that is required for them to perform the requested tasks on our behalf and are obligated to not use it for any other purpose or share such data with any other party.

Beyond that, we ourselves are not sharing your provided personal data with anyone else. Though exceptions may arise, such as cases including (not limited to) potential legal obligations such as law enforcement, protection of our or our users’ rights, fraud prevention, or intellectual property rights.

Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. Paddle provides all customer service inquiries and handles returns. Paddle strives to comply with the requirements of the GDPR. See here: https://www.paddle.com/legal/gdpr You can find Paddle’s privacy policy here: https://www.paddle.com/legal/privacy.

Consequently we ourselves don’t process any personally identifiable financial information such as credit card numbers (or similar). Rather we are only notified about the status of your purchase and process related data (e.g. name, email, product name, quantity) for the sake of fulfilling your order (performance of contract). The legal basis for the data processing is Art. 6(1)(b) GDPR.

For the sake of sending you automated emails in contexts like order fulfillment, user account password resets or personal data change confirmations, we are leveraging services provided by Scaleway.com. You can find Scaleway’s privacy policy here: https://www.scaleway.com/en/privacy-policy/ We consider sending such transactional emails the performance of your purchase contract with us, hence the legal basis for the data processing is Art. 6(1)(b) GDPR.

Email communication

For the sake of support related communication with you via email, we are leveraging services provided by Proton.me. You can find Proton’s privacy policy here: https://proton.me/legal/privacy.

Processing of any data in this context happens for the sake of responding to your requests. We consider it our legitimate interest to (including, not limited to) communicate with you upon your requests, be it for the sake of improving our products and services, or to resolve potential issues. Therefore the legal basis for the data processing is Art. 6(1)(f) GDPR.

Associated data will be deleted upon it having fulfilled its original purpose, which might include scenarios such as (including, not limited to) verification having succeeded, a request having been concluded, or feedback having been processed.

Protection of minors

We don’t provide our products or services to children or adolescents. Therefore we are not knowingly collecting their personal data and are not passing it on. If you’re under 18, you may use our Website only with the consent of a parent or legal guardian.

Cookies

Cookies are small text files that are stored in your web browser. Our website uses functional cookies for the sake of allowing user account usage (e.g. login, password reset).

Furthermore, for the sake of the shop page and checkout functionality, our online reseller Paddle.com may set further third-party functional cookies. We have no control over such processing or cookies. Hence any kind of data processing and setting of additional cookies in this context, regardless of their nature, is the responsibility of Paddle.com. You can find Paddle’s privacy policy here: https://www.paddle.com/legal/privacy.

Overall these functional cookies may either be session cookies, which are deleted after leaving our website, or persistent cookies, which will be deleted after a set amount of time. The processing of these functional cookies serves our legitimate interest to allow usage of our shop page, as well as giving access to user accounts, hence the legal basis for the data processing is Art. 6(1)(f) GDPR.

These functional cookies have limited impact on your privacy, hence we are not required to request your explicit approval to set them while visiting our website. If this is not to your liking however, you can use your web browser’s capabilities to block such cookies from being set in the first place. Please be aware that in doing so, our website may not function as intended for you.

YouTube

Our website uses embedded videos served via YouTube, owned by Google Inc. Whenever you click such an embedded video, a connection to youtube.com is being made. Any kind of data processing and setting of additional cookies, regardless of their nature, is the responsibility of Google Inc. We have no control over such processing or cookies. You can find Google’s privacy policy here: https://policies.google.com/privacy. It’s our legitimate interest to present our products in an informative manner, hence the legal basis for the data processing is Art. 6(1)(f) GDPR.

Links to third party websites

Our Website may contain links to third party websites that are neither owned nor controlled by us. We have no influence over those third party websites and hence assume no responsibility for their content. Such external links are placed for the sake of their informational nature only and not for the sake of endorsement or other purposes. Please refer to the respective website’s privacy policy for information on whether, and if so, how your personal data is being processed.

Your rights

You have the following rights under the GDPR:

Right to withdraw consent (Art. 7 GDPR): You have the right to withdraw any of your prior given data processing consent in regards to future processing of your personal data.
Right of access (Art. 15 GDPR): You have the right to access any of your personal data that we might be holding onto.
Right of rectification (Art. 16 GDPR): You have the right to update your personal data. You can do so by using your user account. Please be aware, that data embedded into your existing license keys can’t be changed this way.
Right of erasure (Art. 17 GDPR): You have the right to have your personal data be deleted. Please be aware, that for security reasons, deleting your user account can’t be done by yourself, but rather requires you to request us to do so. Your product licenses are tied to your user account. Therefore, if you want us to delete your user account, it also implies deleting your associated product licenses.
Right of restriction of processing (Art. 18 GDPR): You have the right to request us to limit the processing of your personal data.
Right of data portability (Art. 20 GDPR): You have the right to request us to provide or transfer your personal data in a machine-readable format.
Right to object (Art. 21 GDPR): You have the right to object to the processing of your personal data, given certain conditions, acknowledging potential limitations that may result from doing so.
Right to lodge a complaint (Art. 77 GDPR): You have the right to lodge a complaint with a data protection supervisory authority.

Whenever you are exercising your rights, you must be able to identify yourself clearly.

Contact

If you have any questions or concerns about our privacy policy, you may contact us via email: REMOVE+THIS-PART+INCLUDING-ALL-HYPHENS+AND-PLUS-SIGNS-info-REMOVE+THIS-PART+INCLUDING-ALL-HYPHENS+AND-PLUS-SIGNS@golibits.com