Privacy Policy
This page explains what the JavClaw website, checkout handoff, and activation-code recovery flow collect, what stays local to your machine, and how you can contact us about privacy requests.
Last updated: March 23, 2026
Summary
- We process the email, platform selection, locale, and basic attribution data needed to start checkout and deliver your activation code.
- Payments are completed in Stripe Hosted Checkout; we do not collect raw card numbers or CVCs on the JavClaw website.
- The site uses Cloudflare Web Analytics, PostHog, Google tag (Google Analytics), and browser storage for basic traffic, performance, attribution, and conversion measurement.
- The website and purchase flow do not read your local filenames, folder paths, covers, catalog IDs, or video content.
- You can contact help@javclaw.ai to request access, correction, or deletion of site-side data linked to your purchase email.
Scope of this notice
This notice applies to the JavClaw website, the buy page, the payment success page, and the related purchase and activation-code recovery requests initiated from those pages, including interactions between your browser and api.javclaw.ai.
It does not replace the privacy notices of Stripe, payment networks, wallet providers, browsers, operating systems, or third-party sites you may visit from JavClaw.
Information we collect
Information you provide directly
When you use the buy page or activation-code recovery form, we process the purchase email you enter, along with the selected platform and page language needed for the checkout flow.
Transaction and activation information
After payment, the success page uses the session_id in the URL to query the JavClaw API for order status, purchase email, and activation code so the page can display your activation details and support post-purchase flows.
Information collected automatically
Like most websites, we and our service providers may receive technical data such as IP address, device and browser information, pages visited, referral source, UTM parameters, request timing, and basic interaction events.
The site also stores attribution details in browser storage, including utm_source, utm_medium, utm_campaign, and the referring domain.
What we do not collect
- We do not use the website, checkout flow, or recovery flow to read or upload your local filenames, folder paths, covers, catalog IDs, or video content.
- We do not process raw card numbers, CVCs, or equivalent payment credentials on the JavClaw website; those are handled in Stripe Hosted Checkout.
- We do not sell your purchase data or use it for retargeting ads or adult-interest profiling.
How we use information
- To create checkout links and hand you off to Stripe Hosted Checkout.
- To display activation details after payment and send activation codes to the purchase email.
- To process activation-code recovery, troubleshoot orders, prevent abuse, and provide support.
- To understand site performance, conversion paths, and product priorities.
- To comply with accounting, legal, tax, and dispute-handling obligations.
Browser storage and analytics tools
We use browser local storage to keep basic attribution data so we can understand how visitors reached JavClaw and which pages lead to conversions.
We use PostHog for named product analytics events. In the current configuration, autocapture, page leave capture, session replay, and person profiles are disabled, but PostHog may still use browser storage or first-party identifiers to support analytics.
We also use Cloudflare Web Analytics through a JavaScript beacon to measure traffic and page performance.
In addition, we use Google tag (Google Analytics) to measure traffic, attribution, and campaign performance. If Google Ads is linked later, Google may use that tagging setup to report ad-driven visits and conversions according to Google's own policies.
Third parties and processors
- Stripe Hosted Checkout: handles payment pages and payment processing, and processes checkout data under Stripe's own policies.
- Cloudflare Web Analytics: provides site traffic and performance analytics.
- PostHog: receives product analytics and conversion events.
- Google tag / Google Analytics: receives traffic, attribution, and campaign measurement events.
- JavClaw API and email infrastructure: used to create checkout links, query payment success, deliver activation codes, and process recovery requests.
- If you use card, Link, or Alipay through Stripe, those payment methods may process relevant transaction data under their own service terms and privacy practices.
Data retention
We keep purchase, activation, recovery, support, anti-abuse, accounting, and dispute-related data for as long as reasonably necessary to provide the service and meet legal or operational obligations. Different categories of data may be retained for different periods.
When data is no longer needed, we delete, anonymize, or de-identify it where feasible. In some cases, we may retain limited records to meet tax, accounting, legal, or dispute-resolution requirements.
International transfers
JavClaw and its service providers may process data outside your country or region, including in the United States and other jurisdictions. We rely on provider contracts, applicable safeguards, and legal transfer mechanisms where required.
Your rights and choices
Depending on where you live, you may have the right to request access to, correction of, deletion of, restriction of, or a copy of site-side personal data linked to your purchase email. You may also have the right to object to certain processing or file a complaint with your local regulator.
You can clear attribution data from browser storage through your browser settings, or block some analytics scripts with browser controls. For payment data processed directly by Stripe, please also review Stripe's own privacy materials.
Children
JavClaw is not intended for anyone under 18, or under the age of legal majority where they live. If you believe a minor has provided personal data to us, contact help@javclaw.ai.
Security
We use reasonable technical and organizational safeguards such as HTTPS, access controls, and data minimization. That said, no internet transmission or storage system can be guaranteed to be 100% secure.
Changes to this policy
We may update this policy as the product, payment flow, providers, or legal requirements change. When we do, we will update the text and date on this page.
Contact us
If you have privacy questions or want to make a data request, contact help@javclaw.ai.