Privacy Policy

How diffoniq.com handles personal data.

1. Controller

See the Imprint for further details.

2. Server log files

When you visit this website, the web server automatically stores data transmitted by your browser (IP address, date and time, requested page, transferred volume, referrer URL, browser and operating system). This is done to ensure secure, stable operation and to defend against attacks (e.g. via fail2ban). Legal basis: our legitimate interest (Art. 6(1)(f) GDPR). Log data is kept only as long as necessary and then deleted.

3. Cookies, analytics and third-party content

This website sets no cookies, uses no analytics and loads no fonts, scripts or media from third-party servers. There is therefore no consent banner: there is nothing to consent to.

4. Release notification (“WDiff32 Announcements”)

If you ask to be told when version 2.0 ships, we process your e-mail address to send occasional announcements about Diffoniq releases and betas. Signup uses double opt-in: you receive a confirmation e-mail, and the subscription only becomes active once you click the link in it; the consent (including its time) is logged.

The subscriber list is kept on our own server in the EU; only the dispatch of the e-mails is handled by our processor SMTP2GO (Sand Dune Mail Ltd, 96–106 Manchester Street, Christchurch 8011, New Zealand), via its EU infrastructure. New Zealand is covered by an adequacy decision of the European Commission. Legal basis: your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time — via the unsubscribe link contained in every e-mail or by an informal message to us; your address is then removed from the list. More: smtp2go.com/privacy.

The signup form is submitted to newsletter.csitte.at, our own self-hosted mailing-list server.

5. Contacting us by e-mail

If you write to us, we process the data contained in your message to handle your enquiry. Legal basis: pre-contractual/contractual measures (Art. 6(1)(b) GDPR) or our legitimate interest in responding (Art. 6(1)(f) GDPR). Data is deleted once no longer required, subject to legal retention obligations.

6. Recipients and third countries

Apart from SMTP2GO (see Release notification) and Paddle (see Purchases), we pass your data to no one. We do not sell data, and we do not use it for advertising. Our web server is operated in the EU, and e-mail dispatch runs on SMTP2GO’s EU infrastructure. Purchase data is handled by Paddle at its own locations in the United Kingdom, the United States and Canada, under its own privacy notice.

7. Purchases

When you buy a Diffoniq licence, the sale is not made by us directly. Our reseller and Merchant of Record is Paddle, which sells the product in its own name and handles payment, invoicing and sales tax. Depending on where you buy from, your contract is with Paddle.com Market Limited (registered in England and Wales, company number 8172165, 30 Old Bailey, London EC4M 7AU, United Kingdom), Paddle.com Inc. (3811 Ditmars Blvd. #1071, Astoria, New York, NY 11105-1803, USA) or Paddle.com (Canada) Ltd (22 Adelaide Street West, Suite 3400, Toronto, Ontario M5H 4E3, Canada).

You enter your purchase data with Paddle, not with us: your name, e-mail address, billing country and payment details. Paddle is an independent controller for that data, and its own privacy notice applies — paddle.com/legal/privacy, which is also where you find how Paddle handles data between its locations in the United Kingdom, the United States and Canada. We never see your payment details. What reaches us from Paddle is what we need to issue and support your licence: your name, your e-mail address, the product and licence type you bought, and the transaction identifier.

Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

8. Your licence

We keep a record of every licence we issue: the licence holder’s name, the e-mail address the licence was sent to, the licence type and number of seats, the date of issue and the transaction it belongs to. We need this record to know which licences exist — to re-send a licence file you have lost, to answer questions about your entitlement, and to work out your upgrade price when a later major version appears. A Diffoniq licence does not expire, so we keep this record for as long as the licence can be used.

You can ask us to delete it at any time. Please note what that means in practice: without the record we can no longer re-send your licence file if you lose it, and we can no longer recognise you as an existing customer when a paid upgrade comes along. Where the law requires us to keep records of a sale, we keep those for as long as it requires.

Your licence file itself is generated and signed on our server and sent to you by e-mail (see Contacting us by e-mail for the dispatch). It contains your name so that it can be recognised as yours; it does not phone home, and the program does not transmit anything about your use of it.

Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

9. Existing WDiff32 registrations

WDiff32 was sold from 1993 onwards, and registered users receive Diffoniq 2.0 free of charge. To be able to honour that, we hold the registration records of the old product: registration name, e-mail address, licence key, licence type and the number of seats it covered. These records come from our own order archive — we did not obtain them from anyone else, and they are not used for anything but this check.

When you claim your free upgrade, we compare the key and e-mail address you give us against that list, and issue the new licence if they match. If they do not, the claim goes to a queue where a human looks at it, so that a change of e-mail address over the years does not cost you your entitlement.

These records are not used for advertising and are never passed on. The free upgrade applies to the Diffoniq 2.x series; once a later major version replaces it, the offer ends and we delete the old registration list.

Legal basis: performance of a contract (Art. 6(1)(b) GDPR) for the upgrade itself; our legitimate interest in being able to verify a claimed entitlement (Art. 6(1)(f) GDPR).

10. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent with future effect. Please write to contact@csitte.at. You also have the right to lodge a complaint with the Austrian Data Protection Authority (dsb.gv.at).

11. Security and external links

This site is served over HTTPS. It links to external websites (in particular csitte.at); this policy does not cover their data processing.

Last updated: 31 August 2026.