Privacy Policy

1. Basic principle — the only information the Developer receives is the device-registration and license-check information listed in section 4

• Colibre is a Windows app you install on your own PC. Your media files, playback history, settings, sign-in data, registered-device information and logs are stored only on your own PC and the Developer cannot see them. The only information the Developer receives is the list in section 4 (IP address, device identifiers and so on).
• The Developer does not receive your name, phone number or payment card details. Your payment email is held by our payment service provider (the "Payment Provider"); as described in section 2, the Developer only views it in the Payment Provider’s admin screen and does not download or store it separately. The Developer does not monetize personal information.
• Problem diagnosis (free and paid) and log submission are described in section 6. The Developer does not receive logs unless you send them yourself.

2. Payment information — collected and processed by the Payment Provider

When you pay, your card details, email, name, billing address and country, and the information needed for tax handling are collected and processed directly by the Payment Provider. The Developer does not receive card details. Processing follows the Payment Provider’s privacy policy, available on the payment screen.

For sales and settlement, the Developer can view order information (order number, payment email, plan, payment status) in the Payment Provider’s admin screen. This information is used only to handle payment-related procedures such as refunds and cancellations, and for settlement.

3. License key

• The license key is issued by the Payment Provider linked to the order number, and is delivered to and retrievable by the owner only, through the payment email.
• The public installer contains no secrets. The key you enter is stored encrypted on your PC.

4. Information sent during online checks (complete list)

The following information is sent to confirm normal use and to register your device. The list below is complete; information not on the list is not sent.

• License check (Payment Provider, United States): the license key, this PC’s installation identifier ("tt-" plus the first 8 characters of a SHA-256 hash made from the Windows device value (MachineGuid)), and the instance ID that the Payment Provider issued when the key was registered. Sent once when the key is registered and then once every 24 hours (±1 hour). Recipient: the Payment Provider (United States).
• Device registration (the Developer’s device-registration service, which issues PINs): the purpose is to register this PC and to check whether one license is being used on several PCs. When you press "Request PIN" in first-time setup and each time you reissue the registration number (up to 5 times a day), the following is sent: the installation ID (a random value made at install), a device identifier (a SHA-256 hash made from the Windows device value (MachineGuid) and the installation ID), the PC name (up to 40 characters), the program version, the request time and a random value to prevent duplicate requests; your connecting IP address is also passed along in the course of communication. Of this information, the connecting IP is stored only as an irreversible hash instead of the original, and the rest is stored in the PIN-issuing service operated by the Developer. It is used only to issue the registration number (15 digits) and to check whether one license is used on several PCs. It is not provided to third parties. Retention: the connecting-IP hash is deleted 30 days after issuance; the daily issuance-log files and stored backups are deleted after 30 days; the other registration information is deleted 180 days after the last use (device check) or when it is replaced by a new registration number. The PC name is a name you choose, so do not put in a name that can identify you personally, such as your real name.
• Connection check (the same Developer service as device registration): the purpose is to check whether this PC can be reached from outside. About every 10 minutes in first-time setup until you receive and save the registration number (PIN), and after you have saved it only when you press "Check connection", the port number to be checked is sent, and your connecting IP is passed along in the course of communication. It is used only for the check and is not stored.
• Update check (the Developer’s update-check service): when the tray program starts and once a day after that, it checks whether a new version exists. The program version (in a request header) is sent and your connecting IP is passed along in the course of communication, but the Developer does not store this access record. It is used only to announce new versions.
• The Developer does not identify individuals from connecting IP addresses and does not combine them with other information.
• Your name, email, location, media lists and playback history are not sent.

5. External services the software connects to

• Your PC connects directly to the services below. These connections do not pass through any Developer system and the Developer does not receive their content. Each service can see your PC’s public IP, and its handling follows that service’s own privacy policy.
• Public IP detection: about every 10 minutes, to check whether your public IP changed (ipify and similar IP lookup services).
• Fetching the radio station list: when you press "Get radio channels", station addresses are fetched from a public station directory (Radio Browser).
• Listening to radio: the broadcast is received from the server of the station you chose.
• Track information, album art and lyrics lookup: when you open a track from your PC’s media, its information is looked up at MusicBrainz, Cover Art Archive and LRCLIB. What is sent: artist, album, track title and track length (search terms); the program name, version and contact (support@colibre.app, shown in the request header (User-Agent) as each service’s rules require); and the IP address of your PC making the connection. Files, account and device information are not sent. Results are saved on your PC so they are not asked for again (found: 90 days, not found: 7 days). This does not pass through a Developer server.
• Certificate issuance: when obtaining the official certificate (Let’s Encrypt).
• Payment and license verification: the Payment Provider.
• The "check that I can be reached at my public IP" feature uses the IP only while the check request is processed, and does not store it or write it to a log.
• Colibre uses an official certificate that car browsers trust (a Let’s Encrypt IP certificate). Under certificate-industry rules, a record of the issuance (including the public IP) is left in public Certificate Transparency (CT) logs.

6. Activity logs

To help find problems, the program writes per-component activity logs (tray.log, engine.log, app.log, http.log and so on) to the logs folder under the Colibre data directory in your Windows local application data folder (for a default installation), and files older than 14 days are deleted when the program starts. Logs can contain the time, the IP of the connecting device (a public IP has its last digit masked to 0; a private home-network IP is kept as is), the request address (values after the question mark are excluded), error messages, the program and Windows versions, and the Windows user name and installation path; the names of files or videos you played may appear mixed into addresses or error messages. Passwords, tokens and cookies are masked in logs. Logs stay on this PC and are not transmitted; only when you want to report an error do you bundle them yourself (the tray menu "Export logs" creates a zip on the desktop) and send them to support@colibre.app. You can open the files and check them before sending. The Developer uses received logs only to analyze errors and destroys log files received for diagnosis within 30 days after the diagnosis is complete.

Diagnosis comes in two kinds.

• Free — diagnosing errors in the Colibre program itself (playback not working, install or update failures, malfunctioning features and so on). It is done with logs you send (support@colibre.app) at no cost.
• Paid (per-case fee) — diagnosing suspected hacking or intrusion, checking security events, and network-environment problems such as the router, the network or the firewall. This is a separate service not included in the basic right of use. The fee and procedure are given on request, and work proceeds only if you agree.

7. Cookies and analytics tools

• The software sets only the cookies needed for sign-in and session keeping, issued directly by Colibre running on your PC: tt_remote (device sign-in, 400 days), tt_rt (sign-in renewal, 400 days), tt_dk (remembering a registered device, 400 days), tt_sid (connection session, 30 days), tt_admin (administrator sign-in, 30 minutes), s2l_profile (profile choice, 400 days). When accessed from a car, a car-specific suffix is added to the end of the name. These cookies are exchanged only with your PC and are not sent to the Developer.
• We do not use analytics, advertising or tracking cookies, or external analytics tools (such as Google Analytics).
• On the payment screen (Payment Provider), the Payment Provider’s cookie policy applies.
• Visiting the website (colibre.app and similar): the site uses no cookies, analytics tools, advertising tools, external fonts or other third-party requests. However, Cloudflare (United States), which delivers the site as the network provider, processes ordinary access records (IP address, browser information, time of access) in the usual way, and the Developer does not use these records to identify individuals or combine them with other information.

8. Your rights

You can delete the information stored on your PC yourself (choose to delete data when uninstalling). Requests to view, correct or delete payment information go to the Payment Provider. Requests to view or delete the device-registration information in the Developer’s device-registration service (installation ID, PC name, hashed device identifier and connecting IP) and diagnostic logs you sent go to support@colibre.app (Privacy Officer: Lee BumSuk), and are handled within 10 days.

9. Third-party provision, processing entrustment, overseas transfer and destruction

• Provision to third parties: none.
• Processing entrustment and overseas transfer: the Payment Provider (United States) — payment and license verification (information transferred: the payment and license information described in sections 2 and 4; method: sent over the network during payment and license checks).
• Destruction: log files received for diagnosis are destroyed within 30 days after the diagnosis is complete. Device-registration information in the PIN-issuing service is deleted without delay when the retention period in section 4 ends. For the update check the Developer stores no access record, so there is nothing to destroy, and the Developer keeps no other user information separately.

10. Changes

If this policy changes, notice is posted on the service screen at least 7 days before it takes effect.