LEGAL
Privacy policy
Last updated 18-10-2026
This policy explains what personal data we collect when you use this website, buy YearWise Pro or use the YearWise program, why we collect it, and your rights under the EU General Data Protection Regulation (GDPR).
1Who is responsible
The data controller is Aeonloom, Copenhagen, Denmark ("we", "us"). For any privacy question, or to use your rights, write to us through the contact form.
2The YearWise program
YearWise works on your computer and offline. Your timelines, and everything in them, stay in a folder on your computer; the program sends nothing to us. If you enter a Pro licence, it is kept on your computer beside YearWise's settings. If Microsoft's WebView2 component is missing, YearWise asks before it downloads Microsoft's installer from Microsoft; that download is between your computer and Microsoft.
3This website
- Visiting. Like every web server, ours records each request (your IP address, the time, the page asked for and your browser's name) to keep the site secure and to find faults. We use no analytics and no advertising trackers, and we do not sell your data.
- Cookies. The site sets two cookies that are strictly necessary:
yearwise-sessionandXSRF-TOKEN. They protect the contact form against forged submissions and expire after 120 minutes. No other cookies are used. - Messages you send us. Through the contact form: your name, your e-mail address, what the message is about, your message and, if you report a problem, the YearWise version and Windows edition you choose to give; and our replies. To stop the form being flooded, your IP address is used to count the messages sent from it, and that count is kept for at most a day. We are told by e-mail that a message has arrived, and our replies come from a no-reply address at yearwise.eu, with a link to read and answer the conversation on this website.
- Downloads. When you download YearWise, the file is delivered by our download provider (section 5), whose request logs, which include your IP address, are kept by the provider for a short time.
4Buying Pro
Paddle.com, our online reseller and the Merchant of Record for every order, runs the checkout. Paddle collects what it needs to take the payment and charge VAT (such as your name, e-mail address, country and payment details) and handles it as a controller under Paddle's privacy policy. We never see your card or bank details.
From Paddle we receive your e-mail address, what you bought and when, and Paddle's reference numbers for the order. We use them to create your licence, send it to you, send it again if you lose it, and answer questions about the purchase. Your licence carries your e-mail address, which YearWise shows as the name the licence belongs to.
5Who we share it with
| Provider | Purpose | Region |
|---|---|---|
| Hetzner | Hosting of this website and its database | EU |
| Scaleway | E-mail (the notice of a new message, our replies, your licence) and database backups | EU (France) |
| Bunny (BunnyWay d.o.o.) | Delivery of the YearWise download | EU (Slovenia) |
| Paddle (Paddle.com Market Limited) | Checkout, payment and VAT, as Merchant of Record | United Kingdom (covered by an EU adequacy decision) |
We do not transfer your data outside the EU and the EEA, except to Paddle in the United Kingdom as described above.
6Why we use it, and the legal basis
- To sell you Pro and deliver and re-send your licence: performance of a contract.
- To answer a message you send us: our legitimate interest in replying, or steps before a contract when you ask about buying.
- To keep the website secure and stop abuse of the contact form: our legitimate interest.
7How long we keep it
| What | How long |
|---|---|
| Contact messages and our replies | Up to 12 months after the last message in the conversation, unless a message needs to be kept longer, for example for legal reasons |
| The count of messages from an IP address | At most one day |
| Cookies | 120 minutes |
| Purchase and licence records | Until you ask us to delete them, so that we can send your licence again if you lose it |
| Database backups | Daily copies for 16 days, weekly copies for 8 weeks, monthly copies for 4 months, yearly copies for 2 years. A deleted message can remain in a backup until that backup expires; backups are used only to restore the site after a failure. |
8Security
The website is served only over an encrypted connection (HTTPS), backups are stored in the EU, and the inbox where we read your messages is protected by a login.
9Your rights
You have the right to access, correct and erase your data, to restrict or object to its processing, and to data portability. Write to us through the contact form; we answer within one month. You may also complain to the Danish Data Protection Agency (Datatilsynet) or to the data protection authority where you live.
10Changes
We may update this policy. The date at the top will change.