Culprit by NoumenonPrice and trial

Privacy

Your measurements stay local

Strong template, not certified legal advice. Review before relying.

Seller: Noumenon, operating from Florida, United States. Legal entity: Noumenon. Contact: noumenon-ai@gmail.com.

Local data

Metrics, 30 days of history, alert rules, process names, project folders and masked commands stay on your machine. We do not receive them. Trial ledgers and licensing state are stored locally. Removing one ledger does not restart the trial; deliberately deleting both or editing local files can reset it. This is not hardware-based DRM. Exported CSV files remain until you delete them.

License requests

Activation and weekly verification send the license key, a salted machine hash and app_version. The hash is SHA-256 of the machine ID and a random per-install salt; we never receive the raw machine ID, hostname or username. Deactivation sends the key and hash. Network failures can trigger retries. The desktop app does not make automatic update checks. Requests also expose an IP address, request time and ordinary HTTP metadata, including the app’s version in its user agent.

Purchase, delivery and support data

Stripe processes payment and billing information in its hosted checkout. We store the checkout session ID, email when supplied by Stripe, key, creation time, plan, revocation status, activated hashes with last-seen times, and deactivation timestamps. We never store full card or bank details. The thanks page sends the checkout session ID to claim your key; it keeps the key in memory only, with no browser storage. The public download request sends an artifact name and no key. Support receives the information you choose to send.

Purposes and legal bases

We process purchase and licensing information to perform our contract with you; rate limits and fraud prevention serve our legitimate interests in securing the service. We retain financial records where required by legal obligation. Support is processed to fulfill your request and provide the product. Where processing requires consent, you can withdraw it without affecting earlier lawful processing.

Service providers

We do not sell personal data or share it for cross-context behavioral advertising. Providers may process data in the United States and other countries. Where personal data is transferred from the EEA, the UK or other regions, we rely on appropriate safeguards (such as Standard Contractual Clauses) where required.

Cookies and analytics

No analytics, telemetry, advertising scripts or cookies are used by this site. Archivo is served locally. Stripe Checkout is a separate service with its own cookies and privacy practices. Hosting providers still receive connection metadata.

Retention

Local history retains 30 days. License records and permanent revocation tombstones currently have no automatic expiry. Device hashes remain until deactivation or replacement; deactivation timestamps are maintained for the rolling 365-day limit. Rate-limit windows last ten minutes and are cleared by expiry alarms. Pricing caches last 60 seconds. No keys, emails, bodies or request URLs are written by application logging.

License records are kept for as long as the license can be used, so that activation and recovery keep working. Payment records are held by Stripe and by us for as long as tax, accounting and fraud-prevention law requires. Support emails stay in our mailbox until the request is resolved and are deleted when you ask, unless the law requires us to keep them. Cloudflare and Vercel keep ordinary request metadata under their own retention schedules; we do not add our own request logs. Requests to delete licensing records need review because deletion can affect activation and fraud prevention. Legally required records may be retained with restricted use.

Your rights

Depending on your jurisdiction, you may request access, correction, deletion, export or portability, restriction, or object to processing. You may withdraw consent and complain to your supervisory authority. California residents may exercise applicable rights to know, delete and correct without discrimination; we do not sell or share data for advertising. An authorized agent may submit a request where the law allows. We may ask for proportionate proof of identity, never your full card details or license key.

Security and children

HTTPS protects service requests. License files use private local permissions, keys are not logged by application code, and command-line secrets are masked in displayed and exported data. No system is perfectly secure; keep your machine and backups protected. Culprit is not directed to children under 13 and we do not knowingly collect their personal data. Contact us if a child has supplied data.

Contact and changes

Privacy, support and refund requests: noumenon-ai@gmail.com. Controller: Noumenon, operating from Florida, United States. The owner must replace these placeholders before accepting purchases. We will update this page and provide notice of material changes where required.