Privacy Policy

1. Definitions and scope

Personal information means information recorded electronically or in another form that can identify a particular natural person, either alone or together with other information, or that describes the activities of a particular person.

An individual user is a natural person who uses the website, products, programs, or services. A business user is an organization or other legal entity that uses them. User means an individual user or business user. Device location information means information about the location of a device used to access the website, products, programs, or services.

This policy applies to the international ip2region website, products, account services, data services, support, and related services. It covers information collected when a user browses the website, creates an account, purchases a product, downloads a release, or contacts support.

This policy does not cover information that a user provides directly to an independent third party through a linked site, payment page, or third-party service. Third parties may have their own privacy policies. Cookies, pixels, and similar technologies operated by a third party are controlled by that third party and are outside this policy.

2. Collection and use of personal information

When you sign in with GitHub or Google, the service receives a provider identifier, verified email address, and basic profile information needed to create and operate your account. Your first successful sign-in creates an account automatically. We do not receive your provider password or retain provider access tokens after sign-in. Linked identities and security timestamps are retained to manage account access.

When a user purchases a product, Paddle processes the payment as the merchant of record. The service retains the Paddle customer or transaction identifier, order status, product, term, amount, currency, receipt or invoice link, and fulfillment information needed to provide the purchase and support the account. The service does not retain complete payment-card details.

When a user contacts support by email or another supported channel, the service may retain the message, contact details, order identifier, and the information needed to investigate and respond. Users should not send passwords, verification codes, session cookies, or complete download tokens in a support request.

When a user visits the website, service infrastructure may record the IP address, network provider, browser type, language, device and software characteristics, referring page, pages visited, and access date and duration. These records are used for security, rate limiting, diagnostics, and service operation.

After a purchase, the service may retain product, release, download, entitlement, and support history so it can deliver the selected product, enforce limits, calculate renewals or refunds, and resolve billing or access issues.

With appropriate authorization, the service may receive limited identity, transaction, fraud-prevention, or support information from service providers and other sources so it can operate the product and protect the account. Providers are expected to process information only for the documented service purpose.

The service uses personal information to complete orders and deliver data releases; authenticate accounts through GitHub or Google; answer questions and requests; send important service, security, maintenance, and policy notices; provide receipts and tax documents through Paddle; operate, maintain, and improve the website and data services; detect abuse, enforce quotas, and protect users; and comply with law, valid legal process, or an authorized request.

The service may produce aggregate or anonymized statistics about product and service usage. Such statistics are designed not to identify an individual user. A new use that is materially different from the purpose for which information was collected requires appropriate notice or consent where required by law.

Information is retained for as long as needed to provide the service, fulfill legal, accounting, security, and dispute-resolution obligations, or protect legitimate rights. When an account is closed and no retention duty remains, the service stops ordinary use and deletes or anonymizes information on a reasonable schedule.

3. Cookies and similar technologies

The website may store small data files called cookies on a computer or mobile device. Cookies can contain an identifier, site name, and other characters. Session cookies help keep a signed-in session working; limited preference cookies can remember settings needed for the service.

Cookies are used to keep the website reliable, secure, and convenient. They are not used for a purpose outside this policy. A browser can usually delete stored cookies or block new cookies, but blocking required cookies may prevent sign-in, checkout, or other account functions from working.

The service may use links or pixels in service emails when needed to deliver, secure, or measure a message. Marketing messages, if used, must provide an unsubscribe mechanism. A user can contact support about a tracking concern.

Some browsers provide a Do Not Track setting. Because there is no uniform industry response for every form of this signal, the service honors applicable legal requirements and documents any operational response in the production privacy review.

4. Sharing, transfer, and public disclosure

The service does not sell personal information. It may share the minimum information needed with processors that provide payment and receipts through Paddle, email delivery, hosting and object storage, abuse prevention, monitoring, or customer support. These providers must be bound by confidentiality, security, and purpose limitations appropriate to the service.

The service may share information when a user has given clear consent; when a provider must fulfill an order or support request; when needed to protect the safety, property, security, or rights of the service, users, or the public; or when required by law, court order, valid legal process, or an authorized government request.

If a merger, separation, acquisition, asset transfer, restructuring, or insolvency affects personal information, the receiving entity must continue to protect it under this policy or provide the notice and obtain the consent required for a materially different purpose.

The service publicly discloses personal information only with clear consent or when disclosure is required by law, a final court order, or a mandatory request from a competent authority.

5. Information that is not personal information and other exceptions

Information that cannot identify a person by itself or together with other information, such as language, postal code, isolated device information, or search terms, may be collected, used, transferred, or disclosed for legitimate service purposes. If it can later identify a person or describe that person's activity, it is treated as personal information under this policy.

Consent may not be required where processing is necessary to comply with law; protect national, public, or information security; respond to an emergency involving life, property, or safety; investigate or prevent abuse or crime; perform a contract requested by the user; keep the products and services secure and stable; or satisfy another exception recognized by applicable law.

6. Storage and protection

The service uses reasonable technical and organizational safeguards to protect personal information from unauthorized access, use, disclosure, alteration, damage, or loss. Safeguards may include HTTPS and encryption in transit, secure session storage, access controls, least-privilege administration, security monitoring, trusted hosting controls, backup protection, and staff security practices.

The internet and email are not completely secure. Users should protect their connected provider accounts, enable provider security features, and report a suspected credential compromise or other security incident to support immediately. The service cannot guarantee absolute security, but it will investigate and respond to incidents under the applicable legal and operational process.

Personal information is kept only for the shortest period reasonably needed for the stated purpose, legal obligations, accounting, security, or dispute resolution. When an account is deleted or the service stops, information is deleted or anonymized when retention is no longer required. Security, fraud, abuse, and legal records may be retained for the period needed to protect the service and comply with law.

If a security incident affects personal information, the service will provide notices and take remedial steps as required by applicable law. Notices may describe the basic incident, possible impact, response measures, risk-reduction steps, and available remedies.

7. User rights and choices

Subject to applicable law and reasonable identity verification, a user may request access to personal information held by the service, correction of inaccurate information, deletion of information, a copy of information, restriction or objection to a processing activity, or withdrawal of optional consent.

Account information can be reviewed or changed through the account settings available in the service. You can connect or disconnect sign-in providers in Account. Provider passwords and email verification are managed with GitHub or Google. A user may request deletion or account closure by contacting support at support@ip2region.com. Closing an account may stop access to products and services and may not undo transactions or records that the service must retain.

The service may need to retain information that is required to complete an order, prevent abuse, protect a legal claim, satisfy accounting or tax obligations, or comply with law. If information is deleted from an active system, backup copies may remain until the normal backup rotation removes them.

The service will verify the requester and respond within a reasonable period required by applicable law. Technical limits, legal duties, security needs, or the rights of others may prevent the service from fulfilling every request in full. Support will explain the applicable reason when permitted.

8. Policy updates

This policy may change when the products, services, technology, or legal requirements change. The service will not remove rights required by law without appropriate notice and consent.

Before a material update takes effect, the service will publish the revised policy on the website and identify the effective date when appropriate. Continued use after the effective date means the user accepts the revised policy where acceptance is legally valid. A user who does not accept a material change should stop using the service and contact support about account closure or applicable rights.

9. Contact

Questions, requests, complaints, or suggestions about this policy can be sent to support@ip2region.com. Include a short description and the specific service or account involved. Never include a password, verification code, session cookie, or complete download token.