Last updated: 2026-08-15
This Privacy Policy applies to melltotune.com, the mellto-tune Windows app, and related APIs operated for the mellto-tune product.
Who we are
mellto-tune is a Windows performance control product. Contact for privacy requests: [email protected] (also available from your Account page).
Data we process
- Account: email address, password hash (never plaintext), optional authenticator secrets for 2FA, session identifiers.
- Licensing: subscription status from Stripe, device identifiers / hardware fingerprints for the one-PC seat and trial abuse prevention, last-seen timestamps.
- Support: messages you send from Account, plus account metadata needed to help you.
- Payments: handled by Stripe. We do not store full card or PayPal credentials.
- Website analytics (optional): only if you accept analytics cookies — page views and basic usage via Google Analytics.
- Essential cookies: signed-in session (`mellto_session`, httpOnly) and cookie-consent preference.
Why we process it
- Authenticate you and keep the site/app secure (including rate limits and 2FA).
- Deliver downloads, entitlement checks, trials, and paid seats.
- Prevent fraud / multi-trial abuse and enforce one licensed PC per account.
- Respond to support requests and send transactional email (password reset, receipts via Stripe).
- Understand site usage when you consent to analytics.
Legal bases (EEA/UK)
Contract performance (account, license, support you request), legitimate interests (security, abuse prevention, product integrity), and consent (non-essential analytics cookies).
Cookies
Essential cookies keep you signed in and remember your cookie choice. Analytics cookies load only after you accept them in the consent banner. You can change your mind anytime via “Cookie settings” in the footer.
Retention
Account and license records are kept while your account exists and for a limited period afterward for billing disputes, security, and legal obligations. Support tickets and audit events are retained for operational history with periodic pruning. Analytics retention follows your Google Analytics property settings when enabled.
Sharing
We share data with processors who help run the product: Stripe (payments), email delivery (transactional mail), hosting, and — only with consent — Google Analytics. We do not sell personal data.
International transfers
Infrastructure and processors may be outside your country. Where required, we rely on appropriate safeguards used by those providers.
Your rights
Depending on your region you may request access, correction, deletion, export, or restriction of processing, and you may withdraw analytics consent. Use Contact support on your Account page, or email [email protected].
Security
Passwords are hashed with scrypt. Sessions use httpOnly cookies (or a desktop Bearer token). Admin tools use a separate httpOnly session. Transport should be HTTPS in production.
Children
mellto-tune is not directed at children under 16. Do not create an account for a child.
Changes
We may update this policy. The “Last updated” date will change, and material changes may be highlighted on the site.
Also see Product terms for subscription, risk, and acceptable use.