Privacy Policy

1. Who is responsible

Desktop Carpet is designed and built by MCAN2 (mcan2.com) and published by Teddy Production Teknoloji ve Danışmanlık Ticaret Limited Şirketi (MERSİS no. 0833120871700001), Namık Kemal Mah. Sütçü İmam Cad. No: 88 İç Kapı No: 6, 34762 Ümraniye, İstanbul, Türkiye. The publisher is the controller of the personal data described here. Privacy questions and requests: use our contact form or write to teddy.productionn@gmail.com.

2. What we collect and why

When you get a free key

Your email address, the key and when it was made, together with the visit details described under “Visit statistics” below. We use your email address to send you the key, to send it again if you ask (“Lost your key?” in the app) and to tell you about important changes to your key. Legal basis: performing our contract with you.

When the app checks your key

Your key, a random ID the app creates for each computer, the computer's name (so you can tell your computers apart when you reach the limit of 3) and when each computer was first and last seen. Legal basis: contract.

Keys from the earlier free trial

Keys from the earlier free trial also keep a simplified form of the email address they were sent to and the ID of each computer that used a trial, which we used to give each person and computer one trial. Legal basis: our legitimate interest in preventing abuse.

Emails

We email you your key when you get one, and again when you use “Lost your key?” in the app. We send news only if you ask for it (see below). We don't sell your email address or give it to advertisers. Legal basis: contract.

News emails, only if you tick the box

Under the key form there's a box that is never ticked in advance: “Yes, email me about new rugs and packs, and now and then news and offers from MCAN2.” If you tick it, we email you about new rugs and packs and, now and then, about news and offers from MCAN2, who makes Desktop Carpet (such as MCAN2's design work). We keep a record of your consent: your email address, when you gave it, where (the key form), the wording you saw and the country you were in. Every news email has a link to unsubscribe, and you can also write to us. When you unsubscribe, we stop and keep a short note of it (your email address and the date), so we don't email you news again. Not ticking the box changes nothing about your key. Legal basis: your consent, which you can withdraw at any time.

When you write to us

If you use the contact form on this site, we keep your email address, your name if you give it, the topic, any license key you add, your message, the page you wrote from and the country your message came from (as provided by our hosting provider). A problem report sent from the app also includes your key and technical details that help us fix the problem: the app version, your operating system, your screens' size, the app's language and the rug settings. We use them only to answer you, and we email a copy of your message to ourselves so we can reply. Messages are deleted a year after we last dealt with them. Legal basis: our legitimate interest in answering you.

Visit statistics

We count visits with our own simple counter. It uses no cookies, stores nothing on your device and keeps no IP addresses. To count each visitor once per day, we combine your IP address and browser details with a random value that changes every day and is deleted the next day, and keep only the resulting code, which can't be traced back to you. With it we note the page and events (for example, getting a free key), the website or campaign that brought you here, your approximate location (country, region and city, as provided by our hosting provider), device type, operating system, browser, language and screen width. Individual visit records are deleted after a few days; only daily totals are kept. When you get a free key, the same details are saved with it. Legal basis: our legitimate interest in understanding how people find and use the site.

Abuse protection and logs

To limit how many keys and contact messages can be requested, we briefly keep a coded (hashed) form of your IP address and delete it within a day. Our hosting provider may also keep standard technical logs, such as IP addresses, for security and operation. Legal basis: legitimate interest in keeping the service secure.

3. What's stored in your browser

No cookies. The site uses your browser's local storage only for things you've done on it: the free key you got (so the page can show it to you again), whether you last looked at the Windows or the Mac preview, and the email address you typed into the key form or the contact form (so you don't have to type it again). You can remove all of it by clearing this site's data in your browser.

4. Who processes data for us

• Netlify: website hosting, server functions and data storage (United States)
• Resend: sending our emails (European Union)

They process data only to provide their service to us. We don't sell or rent your personal data and we don't share it for advertising. Fonts and images on this site are served from our own domain, so loading a page doesn't contact anyone else. Links to mcan2.com take you to MCAN2's own website, which has its own privacy notice.

5. International transfers

Because our providers operate in the United States, the European Union and other countries, your data may be processed outside the country where you live. Where the law requires it, we rely on the safeguards these providers offer, such as standard contractual clauses.

6. How long we keep data

• Keys, the email address a key is filed under and the computers a key is on: while the key exists.
• Markers from the earlier free trial (simplified email, computer IDs): while the trial's key exists.
• Consent to news emails: until you unsubscribe. After that, a note that you unsubscribed (your email address and the date), so we don't email you news again.
• Individual visit records: a few days. Daily totals, which don't identify anyone, are kept.
• Contact form messages: up to a year after we last dealt with them.
• Hashed IP addresses used for key and contact limits: up to one day.

7. Your rights

Depending on where you live, for example under the EU GDPR or the UK GDPR, you can ask us to access, correct or delete your data, give you a copy, restrict or object to how we use it, and withdraw any consent you gave. Write to us through our contact form or at teddy.productionn@gmail.com and we'll reply within 30 days. If we delete the data of a key, we can no longer recover or manage that key for you.

You can also complain to your local data protection authority, for example the one in your EU country or the ICO in the UK. Türkçe: KVKK Aydınlatma Metni

We don't sell or share personal information for targeted advertising, as those terms are used in US state privacy laws.

8. Children

Desktop Carpet isn't meant for children under 16, and we don't knowingly collect their data.

9. Security

The website and the app talk to our servers only over HTTPS, license tokens are cryptographically signed, and admin access is restricted. No system is perfectly secure, but we take reasonable care to protect your data.

10. Changes

If we change this policy, we'll update the date at the top. If a change matters for you, we'll also say so on the website.