Who we are
Progmasoft runs progmasoft.com, Progmasoft Account, Progmasoft Credentials and the Progmasoft Console, ViGet and the Progmasoft product sites. This policy covers all of them. Write to [email protected] with any question about it.
What your account keeps
Your account name, your email address, and either a hash of your password or the identifier Google gives your Google identity. We never keep your password itself: it is hashed before it is stored. We also keep when the account was created, and which version of these policies you accepted and when.
While you are signed in we keep a digest of your session token and the moment the session ends. The token itself exists only in your browser.
If you register an application in the Progmasoft Console, we keep what you enter for it.
Your IP address
We keep your IP address for one purpose only. ViGet does not yet take uploads from accounts: only Progmasoft publishes to it. Once it does, ViGet will record the IP address each upload came from, together with the upload. If an upload turns out to contain malicious software, we will use that address to establish where it came from and give it to the competent authorities. We will use it for nothing else.
We do not keep IP addresses with your account, with your sessions or in the access logs of our web servers.
To slow down password guessing, the sign-in service counts requests per address for a few minutes. The count is held in memory and never written down.
We do not sell your data
We do not sell, rent or trade your data to anyone, and that includes your IP address. We do not use it for advertising, and we do not build a profile of you.
Services that see your requests
Our sites are served through Cloudflare, which carries every request to us and protects the sites against attacks. To do that, Cloudflare processes your IP address under its own privacy policy. The pages use Cloudflare Web Analytics, which counts visits without cookies and without identifying you.
If you sign in with Google, Google tells us the identifier and the email address of your Google identity, and nothing else of your Google account.
Cookies and storage
We set only the cookies the sites need: the cookie of your session, the short-lived cookies of Google sign-in and of Progmasoft Credentials, and the cookie that remembers your language. Your choice between light and dark is kept in the storage of your browser. None of them is used to track you.
How long we keep it
Account data is kept for as long as the account exists. A session is removed once it has ended. The IP address of a ViGet upload will be kept while the upload is on ViGet and for one year after it was removed, so that a report that arrives late can still be followed.
Your rights
Write to [email protected] from the address of your account to learn what we keep about you, to correct it, or to have the account deleted. We answer within 30 days.
Changes
A new version of this policy carries a new date on this page. We write to the owners of accounts before a new version takes effect.
See also: Security Policy