Privacy Policy

What data Pine Shortcut and this website collect, why, on what legal basis, how long we keep it, and your rights.

Această pagină a fost tradusă automat din engleză. Textele în limba engleză și coreeană sunt autoritare.

Last updated: October 24, 2026. This policy explains what information the Pine Shortcut program and the website pineshortcut.com collect, how we use it and what choices you have. The service is operated by Solhyang Design (솔향 디자인), Korea. Pine Shortcut has no ads and does not use advertising cookies.

1. What we do not collect

Pine Shortcut never sends the text you type, the content of the windows you use or your clipboard to our servers. Detection of triggers and hotkeys happens only on your PC.

2. What we collect

• Device information: a random device ID, program version, operating system name and language setting. We use it to deliver updates, enforce plan limits and fix problems.
• Account information: your email address, your plan, the PCs linked to your account and your language choice.
• Google sign-in (optional): if you choose to sign in with Google, we receive from Google only your email address, a stable Google account identifier (sub) and whether the email is verified. We store the identifier and email to recognise your account and never receive your Google password or access your Google data. You can disconnect Google at any time in your account settings, and the data is deleted when you delete your account.
• Snippets you save: the triggers, texts, folders and hotkeys you choose to save are stored on our server only so that your account can sync them to your linked PCs. We do not use them for any other purpose. Do not store passwords or card numbers in snippets.
• Payment information: purchases are handled by Paddle, our payment provider and merchant of record. We receive the subscription status, not your card number.
• Support messages: the emails you send us and the details you include in them.
• Server logs: basic technical request records (such as IP address, time and requested page) created when you use the website or the program, used for security and troubleshooting.

3. Cookies and similar technologies

• Essential cookies: a session cookie keeps you signed in (HttpOnly, up to 30 days) and a language cookie remembers your language choice for one year.
• No advertising cookies: we do not use advertising cookies, ad networks or cross-site tracking on the website or in the program.
• Sign-in helper cookie: while you sign in with Google, a short-lived HttpOnly cookie (up to 10 minutes) protects the sign-in against forgery and is removed afterwards.

Cookie names: sk_session (sign-in session, 30 days), lang (language choice, 1 year) and sk_oauth (Google sign-in, up to 10 minutes). All of them are strictly necessary to provide the sign-in and language features you ask for, so under Article 5(3) of the EU ePrivacy Directive (and the CNIL guidance that exempts authentication cookies) they need no consent, and the website shows no cookie banner. If we ever add analytics or advertising cookies, we will ask for your consent first and update this section.

Paddle may set its own cookies on its checkout pages under its own policy.

4. Purposes and legal bases

We process personal data for the purposes below. Where the GDPR or a similar law applies, the legal basis is shown with each purpose. We do not sell personal information.

• Providing the service: creating and securing your account, sending verification codes by email, syncing your snippets, applying plan limits and delivering updates. Basis: performance of a contract with you.
• Subscriptions and billing: processing payments and refunds through Paddle and keeping the records the law requires. Basis: performance of a contract and compliance with legal obligations.
• Security, abuse prevention, fixing problems and answering support requests. Basis: our legitimate interest in running a safe and reliable service.

5. Service providers and international transfers

We use Cloudflare to host our servers and database, Resend to send verification emails, and Paddle for payments as our payment provider and merchant of record. They process data on our behalf or under their own terms. These providers may process data in countries other than your own, including the United States, so your information may be transferred outside your country, for example from the European Economic Area, the United Kingdom, Switzerland or Korea. Where required, we rely on safeguards such as standard contractual clauses and the providers' data processing terms. If you choose Google sign-in, Google LLC processes the sign-in under its own privacy policy.

6. Retention

• Account and snippet data: kept while your account exists and deleted immediately when you delete your account.
• Payment and invoice records: kept for the period required by tax and commercial laws.
• Server logs: kept for a limited period for security and troubleshooting, then deleted.
• Support emails: kept for as long as needed to resolve your request.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete and receive a copy of your personal data, to restrict or object to its processing, and to withdraw consent where processing is based on consent. You can download your data and delete your account and all snippets from the account page at any time. For other requests, write to contact@pineshortcut.com and we will respond within the time the law requires. You may also complain to your local data protection authority.

8. Children

The service is not directed to children under 14 and we do not knowingly collect their personal information.

9. Changes and contact

If we change this policy we will update the date above and give notice of material changes. Machine-translated versions of this website may contain errors; the English and Korean texts are authoritative. Questions: contact@pineshortcut.com.