Who we are
This website is operated by Bell Standard OÜ, an Estonian company. You can contact us at contact@getshredquest.com.
What this policy covers
This policy applies to the ShredQuest website, ShredQuest desktop licensing, and related support. It does not cover third-party websites or services that we link to.
Information we collect
The website does not currently use accounts, analytics cookies, newsletter signup forms, payment forms, or embedded tracking scripts.
When the ShredQuest desktop app starts, it sends a limited app-open analytics event. The event may include the app version, operating system/platform, store and build channel, build commit, Steam application identifier, initial app screen, and a random session ID generated for that app run. Our edge provider may add the approximate country, serving data center, and user-agent information associated with the request. The analytics event does not include a license key, Steam user identity or auth ticket, hardware fingerprint, song or project contents, audio or MIDI input, or a persistent advertising identifier.
If you email us for support or questions, we receive the email address and any information you choose to include in your message.
If you buy or activate ShredQuest Full, we use the buyer email, license status, license key suffix, app version, operating system/platform, install ID, activation time, last check-in time, and client IP information to provide licensing and support. Raw IPs may be stored in activation and license event records for abuse review, then scrubbed according to our retention policy. ShredQuest does not use hardware fingerprinting for V1 licensing.
If ShredQuest Full is managed through Steam, we may process SteamID64, Steam app and Full Upgrade identifiers, Steam access status, install ID, app version, operating system/platform, activation time, last check-in time, and client IP information to verify Steam-managed Full access and provide support. We do not log raw Steam auth tickets in normal support records.
Our hosting and security providers may process basic technical logs, such as request times, IP addresses, browser information, and requested URLs, to deliver and protect the website.
We use DigitalOcean to run the licensing service and database, store static website files, and keep private operational and access logs. We use Backblaze B2 for client-side-encrypted database backups. Those backups may contain the licensing and administration data described above, but they are encrypted before they leave our production hosting environment.
We use Postmark to send transactional direct-license emails. Postmark processes the recipient email address, message content, and delivery metadata needed to send and troubleshoot those messages. We do not use those messages for advertising.
How we use information
We use information only as needed to:
- respond to messages you send us;
- operate, maintain, and secure the website;
- issue, activate, check, reset, revoke, or refund ShredQuest Full licenses and entitlements;
- help with lost keys, activation limits, Steam-managed Full access, new computers, and Edition support requests;
- measure aggregate app opens, release and channel adoption, and initial app screens so we can assess release health and improve the product;
- understand and resolve technical issues.
Sharing
We do not sell personal information. We may share limited information with service providers that help us host, secure, or operate the website, or when required by law.
Cloudflare processes the desktop app-open event and related request information on our behalf through Workers and Workers Analytics Engine.
Our other service providers include DigitalOcean for hosting, database, storage, monitoring, and private logs; Backblaze for encrypted backup storage; Postmark for transactional email; Valve for Steam ownership checks; GitHub for private source hosting and deployment access; and HashiCorp for Terraform infrastructure state. We limit each provider to the information and access needed for its role.
Retention
We keep support emails and related correspondence only as long as reasonably needed to respond, maintain records, or handle follow-up questions. License event logs are kept for support and abuse review, with raw IP data scrubbed after 180 days. ShredQuest-managed private application and storage access logs are configured to expire after 180 days. Provider-controlled account, security, and control-plane records follow each provider's terms and applicable legal requirements.
Desktop app-open analytics are stored in Cloudflare Workers Analytics Engine for up to three months. The random analytics session ID applies only to one app run and is not reused to track the same installation across launches.
Encrypted Backblaze database backups follow a separate recovery schedule: daily backups are retained for at least 30 days and designated monthly backups for 12 months. Governance Object Lock prevents early deletion during those periods. Transactional email data is retained according to the production Postmark account's service settings and only as needed for delivery, troubleshooting, and licensing support.
Your choices
You may contact us to ask about personal information we may hold about you, or to request correction or deletion where applicable. Email contact@getshredquest.com.
Changes
We may update this policy as the website changes. The updated date above will show when the latest version took effect.