MONOCREAT ("Company," "we," "us," or "our") protects personal data while providing the commercial Windows website downloader software ULTIMATE WEBSITE DOWNLOADER (the "Product"), our website, and related customer support. This Privacy Policy explains what personal data we collect, why we use it, who receives it, how long we retain it, and the rights available to individuals.
This Policy applies to our Product and website. Third parties that process information for their own purposes — such as Paddle acting as Merchant of Record for payments — also apply their own privacy notices to that processing.
We act as controller where we determine the purposes and means of processing connected with Product delivery, license management, customer support, and operation of our own website.
This Policy applies to:
The privacy policy of the relevant operator applies when you use a third-party website or service. We do not become the operator or controller of a target website merely because you use the Product to download from it.
The information actually collected depends on the features you use and our final technical implementation.
Paddle collects payment-method and billing information directly during checkout. We may receive some or all of the following from Paddle to deliver the Product and administer the transaction:
We may record this transaction data in our own payment ledger to identify missing transactions, fulfill orders, meet accounting and tax obligations, and prepare country-level sales statistics. We use country-level statistics for sales, service, and advertising strategy, not for tracking advertising to an individual buyer.
Our payment ledger does not store full payment-card numbers, card security codes (CVC/CVV), payment IP addresses, cities, postal codes, or detailed billing addresses. Paddle and the relevant payment institutions process such payment information under their own notices.
The following information may be processed to activate the Product, prevent misuse, deliver updates, and troubleshoot issues:
We do not transmit error diagnostics automatically. The Product shows the report before transmission and lets you cancel. Diagnostic messages are sanitized on the device to remove common URLs, email addresses, and full local file paths. Reports do not include file contents, cookies, passwords, payment-card data, or an IP-address field. Hosting and security providers may nevertheless process network IP addresses in ordinary request logs under their own short-lived security and log-rotation settings.
The Product may process URLs you enter and content from target websites.
If you voluntarily attach files, logs, screenshots, or sample URLs to a support request, we process that content for support purposes. Do not send passwords, payment-card data, unnecessary personal data, or third-party personal data you are not authorized to share.
The following information may be generated automatically when you visit our website:
We do not use Google Analytics, advertising trackers, or optional marketing cookies. Essential hosting and security processing may be provided by Cloudflare.
If you consent to marketing, we may process your email address, subscription status, and the times of consent and withdrawal. Where the law allows messages to existing customers without prior consent, we still provide an unsubscribe method.
We do not intentionally collect sensitive data that is unnecessary to provide the Product, such as racial or ethnic origin, political opinions, religion, health data, or biometric data.
The Ultimate Website Downloader Chrome extension reads only the URL of the tab you are viewing at the moment you click its toolbar icon, and sends that URL to the Product (Windows app) installed on the same PC via Chrome's Native Messaging. This URL is not transmitted to any external server. The extension does not read page content, cookies, or browsing history, and does not download anything by itself. The extension's use of information adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements: we do not sell this data, do not use or transfer it for purposes unrelated to the extension's single purpose (sending the current tab URL to the Windows app), and do not use it to determine creditworthiness or for lending.
| Purpose | Main Data | Legal Basis |
|---|---|---|
| Confirm an order, deliver the Product, and activate a license | Purchase data, email, license and technical data | Entering into and performing a contract |
| Validate licenses and prevent unauthorized use or fraud | Transaction data, license data, IP and device data | Contract performance and our and users' legitimate interests |
| Provide updates, security, and technical support | Product environment, error data, support content | Contract performance and legitimate interests in service security and improvement |
| Handle refunds, chargebacks, and disputes | Order data, communications, usage and activation records | Contract performance, legal obligations, and establishment, exercise, or defense of legal claims |
| Meet tax, accounting, and regulatory duties | Transaction and business records | Legal obligation |
| Secure and analyze the website | Access logs, cookies, device and browser data | Legitimate interests or consent where required by law |
| Send marketing communications | Email and consent or opt-out records | Consent or legitimate interests where applicable law permits |
| Respond to legal requests and protect rights | Relevant transaction, communication, and technical records | Legal obligation and legitimate interests |
When relying on legitimate interests, we balance those interests against your rights and freedoms. Where processing relies on consent, you may withdraw consent without affecting the lawfulness of processing before withdrawal.
We may use cookies or local storage necessary to operate and secure our website and remember user preferences.
We do not currently use optional analytics, advertising, or marketing cookies.
As Merchant of Record, Paddle processes personal data relating to buyer payments, tax, receipts, refunds, and fraud prevention under its own privacy notice. Paddle and Company may share necessary buyer information under their respective responsibilities for order fulfillment, Product delivery, and support.
Information that Paddle may share with us includes buyer names, addresses, email addresses, purchase history, and transaction analytics made available through the Paddle dashboard. Special-category sensitive data is not needed for this transaction-data sharing.
We reconcile Paddle-signed completed-payment notifications against the transaction API and payout reports to identify missing transactions or settlement differences. Our ledger records only the transaction ID, customer identifier, Product, amount, currency, tax, discount, fee, payout amount, payment/refund/chargeback status, and purchase country code, and is restricted to authorized administrators.
See the Paddle Privacy Notice for details. A privacy-rights request concerning Paddle's own processing may need to be submitted directly to Paddle using its stated contact method.
We do not sell personal data or share it for cross-context behavioral advertising. We disclose it only as necessary for the purposes below.
Our principal vendors are Paddle (payments, tax, and refunds), Railway (license server and database hosting), Cloudflare (website, DNS, and security), Resend (transactional email), and Google (sign-in and email support). We take reasonable steps to require appropriate confidentiality and security obligations from providers.
In selling internationally and providing global services, we may process personal data outside your country. Paddle and cloud, email, support, or analytics providers may process information in other countries.
When personal data from the EEA, UK, or another restricted-transfer jurisdiction is transferred to a country not recognized as adequate, we use applicable Standard Contractual Clauses, the UK Addendum, an adequacy decision, or another legally permitted safeguard. You may request a copy or summary of the relevant safeguards at [email protected].
Account, license, payment, and support information may be processed outside South Korea through these providers' infrastructure. Paddle processes buyer payment and tax information as Merchant of Record under its own privacy notice and legal retention obligations. You may contact us regarding international processing or exercise applicable rights, but refusing processing that is necessary may prevent payment, sign-in, licensing, or support.
We retain personal data only for as long as necessary for its purpose, the applicable contract and dispute period, and legal requirements such as tax, accounting, and consumer-protection obligations. When data is no longer needed and there is no legal retention requirement, we delete or anonymize it.
Backups are deleted on an established rotation and, while awaiting deletion, are not used except for recovery and security.
We use administrative, technical, and physical safeguards appropriate to the risk to protect personal data against loss, misuse, and unauthorized access, disclosure, alteration, or destruction. No transmission or storage method is completely secure. If a personal-data breach occurs, we investigate the risk and notify authorities and affected individuals where required by applicable law.
Depending on where you live and applicable law, you may have some or all of the following rights: confirmation of processing, access to a copy of your personal data, correction, deletion or restriction, withdrawal of consent, objection, portability, protection from solely automated decisions with significant effects, complaint to a data-protection authority, non-discrimination, and appeal of a denied request in some jurisdictions. To exercise a right, contact [email protected].
Under applicable Korean privacy law, individuals in South Korea may request access, correction or deletion, suspension of processing, and withdrawal of consent, and may seek assistance or relief from the relevant authorities for a privacy violation.
For privacy requests, contact [email protected]. If applicable law requires an EU or UK representative for a particular offering, we will appoint and publish the representative details before that offering.
We have not sold or shared personal information for cross-context behavioral advertising during the preceding 12 months.
We do not use solely automated decision-making that produces legal or similarly significant effects. Automated technical checks may enforce license validity, trial eligibility, and device limits; contact [email protected] to contest an access decision.
The Product and website are not directed to children under 18, and we do not knowingly collect personal data from them. If we learn that we collected a child's personal data without valid parental or guardian consent, we will take appropriate action, including deletion, in accordance with applicable law.
Our website and Product may link to Paddle, target websites, or other third-party services. We are not responsible for a third party's privacy practices.
We may update this Policy to reflect changes in the Product, technology, law, or our processing practices. We post the revised Policy with an updated date.
If our response does not resolve your concern, you may lodge a complaint with the data-protection authority in your place of residence or work.
