Privacy

Last updated 13 October 2026.

Coldtill is self-hosted. Your Coldtill server never sends us your customers, payments, wallets or orders. This page covers coldtill.com and the one request your server makes to it.

What coldtill.com stores

Data	Why	Kept
Email address and a password hash	To sign you in and send receipts, security advisories and password resets	Until you ask us to delete your account
Orders: edition, price, payment reference, dates	To give you downloads and your year of updates	As long as tax law requires
Download log: release, IP address, country, browser or `install.sh` user agent	To protect paid builds against sharing	2 years
Session cookie	To keep you signed in	30 days

We don't use advertising or analytics cookies, and we don't sell or share your data.

What your server sends

Once a day, a Coldtill server asks https://coldtill.com/releases.json for the latest version and security advisories. The request carries only its version and edition (for example coldtill/1.4.0 (pro)). Like any web request it also reveals the server's IP address, which Cloudflare's logs may hold briefly. Set COLDTILL_UPDATE_CHECK=off to turn it off.

Who processes it

coldtill.com runs on Cloudflare (hosting, database, file storage and email). Purchases are paid through our own Coldtill server at pay.coldtill.com.

Your rights

You can ask for a copy of your data, a correction, or deletion of your account at privacy@coldtill.com. If you're in the UK or EU you can also complain to your data protection authority.