Privacy Policy
Version 2026-09-17.
Who we are
J-Lar LLC (“we”, “us”) operates j-lar.net and decides how the personal data described here is used (the “data controller”).
- Email: contact@j-lar.net
- Post: TODO(jake) registered agent address
- United States
What we collect, and why
If you join the mailing list
When you submit the signup form we store your email address, the date and time you asked to join, which page you signed up from, and the version of this policy shown to you at the time. When you click the confirmation link we store the date and time of that too.
We keep a short history of these events (requested, confirmed, unsubscribed) so we can show, if asked, that you consented and when. We do not record your IP address or browser details when you sign up.
We use this only to email you about J-Lar LLC and its products. We won’t send anything else, and the list isn’t shared, sold or rented.
Your address isn’t added to the list until you click the confirmation link. If you never confirm, we delete the record after 7 days.
If you buy something (not yet available)
Nothing is for sale here yet. When the store opens, payments will be handled by Paddle acting as merchant of record. Paddle collects payment details directly and we never see your card information. We will receive your name, email address, what you bought, the amount and an order reference, so that we can send your download and your license file, and keep proper business records. This section will be updated with details before anything goes on sale.
When you simply visit the site
Our web servers keep short-lived technical logs of requests: IP address, date and time, the page requested, HTTP status and browser user-agent string. These exist to keep the site running and to spot abuse. They are not used to profile you, and we don’t try to identify visitors from them.
Cookies and analytics
This site sets no cookies and uses no analytics or tracking. There are no third-party scripts, fonts or embedded content on our public pages, so no data about your visit goes to anyone else.
(A cookie is used on our private administration interface, which is not reachable from the internet and only J-Lar LLC staff use.)
Where your data is held, and who can see it
Our website and its database run on hardware operated by J-Lar LLC in the United States. Encrypted backups are held in storage under our control.
Our email is sent and received by our own mail server, hosted on Amazon Web Services (Amazon Lightsail, United States). AWS provides the underlying infrastructure; the mail itself is handled by us.
The only other party that will receive personal data is Paddle, once the store opens (see above).
If you are in the EEA or the UK, note that your data is stored and processed in the United States.
Legal bases (EEA and UK)
- Mailing list: your consent, which you can withdraw at any time.
- Purchases: performance of a contract with you, and our legal obligation to keep business records.
- Server logs and security: our legitimate interest in keeping the service available and secure.
How long we keep it
| Data | Kept for |
|---|---|
| Unconfirmed signups | 7 days, then deleted |
| Mailing list entries | Until you unsubscribe or ask us to delete them |
| Record that you unsubscribed | Kept indefinitely, so that we don’t email you again by mistake |
| Sent email records | Recipient, subject and delivery status are kept; the message body is deleted after 30 days |
| Server logs | 30 days |
| Encrypted backups | 30 days, after which they are deleted |
| Order and license records (once the store opens) | 7 years, for tax and accounting |
Your choices and rights
- Unsubscribe from any list email using the link in it, or by emailing us. It takes effect immediately.
- Ask what we hold about you, ask us to correct it, or ask us to delete it.
- Withdraw consent at any time; this doesn’t affect emails already sent.
- Object to or ask us to restrict certain processing, and ask for a copy of your data in a portable form.
Email contact@j-lar.net and we’ll respond within 30 days. We may ask you to confirm the request from the address concerned, so that we don’t act on someone else’s say-so.
Deleting your data removes it from our live systems. Encrypted backups may still contain it until they age out (see above), after which it’s gone. We don’t restore deleted people from backups.
If you’re in the EEA or the UK and you’re unhappy with our response, you can complain to your national data protection authority.
Security
Traffic to this site is encrypted (HTTPS). Mail we send is authenticated (SPF, DKIM and DMARC) so that messages claiming to be from us can be verified, and is encrypted in transit where the receiving server supports it. Backups are encrypted with keys that are not stored on the server. Access to our systems is limited to J-Lar LLC and protected accordingly.
No system is perfectly secure, but the amount of personal data we hold is deliberately small.
Children
This site isn’t aimed at children, and we don’t knowingly collect data from anyone under 16.
Changes to this policy
The version and date are at the top. If we make a material change affecting people on the mailing list, we’ll say so in an email rather than changing this page quietly.
Contact
J-Lar LLC, contact@j-lar.net — see the Contact page.