Privacy: what we collect, and why.
Last updated 2026-10-09
What we collect. When you join the waitlist, we collect one thing: your email address. When you request the download, we collect your email address, your name, the company you choose to give, and, when your browser carries it, how you found us: the referring site, the page you landed on, and any campaign tag in the link. That information comes from a first-party cookie our site sets on your first visit and keeps for 90 days; a second 90-day cookie remembers a partner code if you arrived through a partner link. When you start a trial, we keep the email address you entered, an identifier for your computer, the app version, and which operating system you are on, as a trial record. We use that email address to send you one reminder a few days before your trial ends; it has an unsubscribe link, and unsubscribing stops it. When you activate a license, we keep the identifier for that computer and the app version with your license. The site also uses Google Analytics to count visits, and our server keeps standard request logs.
Why. Your waitlist address is used to confirm your signup and to send you the occasional update about Hiberden. The address you give for a download receives your download links, and a buyer's address receives the license key. That's all. We don't sell any of them, share them, or add them to anything else.
Retention. We keep your waitlist address until you unsubscribe or ask us to delete it. If you never confirm your signup, you're not on the list at all. Every update email we send includes an unsubscribe link, and unsubscribing removes your address from the list. Download requests, trial records and activation records are kept until you ask us to delete them; when we move your license to another computer, the old activation record is removed. Confirmations, download links, license keys and sign-in links are one-off messages and carry no unsubscribe link; to be removed from everything, ask us as described under Contact below.
The Hiberden app. The Hiberden desktop app, command-line tool, and AI connector run on your own computer. They read and write your archive catalog (a local SQLite file) and the files you choose to archive or verify. They do not send your catalog, your file contents, or any usage data to Hiberden or to anyone else. There is no telemetry, no analytics, and no account. The desktop app and command-line tool contact us only when you start a trial or activate a license online, and then they send what that step needs: the email address or license key you entered, an identifier for this computer, the app version, and, for a trial, which operating system you are on (Windows, Linux, or macOS). The AI connector never contacts us.
The AI connector. Hiberden ships an optional connector (an MCP server) so you can ask an AI assistant about your archive. It runs locally and only answers questions about your own catalog. It contains no AI model and no API key: the assistant you connect (for example Claude, ChatGPT, or Cursor) is a separate product from that company, and your conversation with it is governed by that company's privacy policy, not ours. In its default mode the connector can only read and verify; it makes no changes. Cloud storage keys are entered in the desktop app and stored in your operating system's keyring, so they never pass through the assistant. The connector has its own full policy at hiberden.app/mcp/privacy.
Contact. Questions or deletion requests: email support@hiberden.app.