Privacy Policy

This Privacy Policy explains how Sextant (“we”, “us”) collects, uses, and shares information when you use the Sextant website at sextant.sh and purchase or use our products. We aim to collect only what we need to run the Service.

1. Information we collect

• Purchase information — when you buy a license, our Merchant of Record (Paddle) collects your name, email, billing details, and payment information. Paddle shares with us limited order data (such as your email, product, and country) but not your full payment-card details.
• License data — we and our licensing provider (Keygen) process your license key and related activation/usage metadata to validate licenses.
• Technical data — when you visit the site or install a component, we may process your IP address, device/browser information, and request logs for security and to operate the Service.
• Usage analytics — aggregate statistics about how the site is used, to understand and improve the Service.
• Product analytics and session recording — we use Hotjar (provided by Contentsquare) on the website to capture interaction data such as clicks, mouse movement, scrolling, and pages visited, and to build heatmaps and session recordings. This helps us see where the site is confusing and improve it. Hotjar loads only if you accept it in our consent banner; if you decline, the tool is never loaded. Hotjar sets its own cookies and processes this data under its privacy policy.

2. How we use information

• to deliver licenses and provide and maintain the Service;
• to validate and enforce licenses and prevent abuse;
• to provide support and respond to your requests;
• to comply with legal and tax obligations;
• to improve our products.

3. Legal bases (EEA/UK)

Where the GDPR or UK GDPR applies, we rely on: performance of a contract (to deliver your license and the Service), our legitimate interests (security, abuse prevention, product improvement), legal obligation (tax/accounting), and consent where required (for example, certain cookies).

4. Third parties and processors

We share data only with providers that help us run the Service:

• Paddle — Merchant of Record; processes payments, billing, and taxes under its own privacy policy.
• Keygen — license key issuance and validation.
• Vercel — website and application hosting.
• Hotjar (Contentsquare) — website heatmaps and session recording, to understand how visitors use the site.
• Email and analytics providers — to send transactional messages and measure aggregate usage.

We do not sell your personal information.

5. International transfers

We and our providers may process data in countries other than yours. Where required, appropriate safeguards (such as standard contractual clauses) are used.

6. Retention

We keep purchase and license records for as long as needed to provide the Service and to meet legal, tax, and accounting obligations, then delete or anonymize them.

7. Your rights

Depending on your location, you may have rights to access, correct, delete, or port your personal data, to object to or restrict processing, and to withdraw consent. To exercise these rights, contact us at the address below. Payment-related requests may be directed to Paddle as the Merchant of Record.

8. Cookies

We use essential cookies to operate the site. Analytics and session-recording cookies (including those set by Hotjar) are used only after you opt in through our consent banner, and you can decline them there. You can also control cookies through your browser settings.

9. Children

The Service is not directed to children under 16, and we do not knowingly collect their data.

10. Changes

We may update this Policy; material changes will be reflected by updating the “Last updated” date above.

11. Contact

For privacy questions or requests, email hello@sextant.sh.