Privacy Statement

The Dekglas Minimal-Data Promise

At Dekglas LLC, we build tools for infrastructure, not tools for surveillance. Our privacy statement is intentionally brief because our data collection footprint is strictly limited to what is required to operate our business and validate software licenses.

The Marolum Software

Community Edition (Free): The Community Edition of the Marolum container image makes zero outbound calls. It does not phone home, it does not track feature usage, and it does not transmit diagnostic data back to us.

Connected Licensed Editions (Business and Enterprise): If you activate a Business or Enterprise edition of Marolum using a license key, the software will periodically connect to our license servers to validate your active subscription and your tier's specific feature entitlements. This validation process transmits only your license key, a randomized instance ID, your subscription tier level, and your IP address.

Enterprise Advanced Security: The Enterprise Advanced Security edition is activated by a signed offline license document rather than a license key, and it makes zero outbound calls to Dekglas; like the Community Edition, it never connects to our license servers or any other Dekglas service.

Your Data Stays Yours: Regardless of the edition or tier you use, Marolum never transmits your infrastructure metrics, configuration files, database connections, or the contents of your local SQLite database back to Dekglas. We have no access to them.

The Dekglas Website & Purchases

Website Analytics: Our marketing website currently uses no analytics at all: no analytics cookies, no tracking, and no audience measurement. If we ever adopt privacy-respecting, anonymized analytics, we will update this policy before enabling them, and we will never use intrusive cross-site tracking or marketing cookies.

Account Sign-in: Amazon Cognito hosts registration and sign-in. We use your verified email address and account identifier for your subscription. The licensing service does not receive your password. The separate sign-in service uses essential session cookies.

Essential Browser Storage: Sign-in uses a one-use verification record in your browser tab, valid for ten minutes. Checkout and account recovery store retry identifiers and their applicable terms version in that tab. Checkout also stores your selected plan. These session-storage records contain no email address, access token, payment details, or license key. Account access tokens and collected license keys are held in page memory; they are not saved in browser storage. Copying or downloading a license key saves it only when you choose to do so.

Email Verification: If your sign-in does not provide a verified mailbox, you can request a verification email from your account. The email address, code and request retry identifier stay in page memory, not browser storage or URL parameters. The account service retains challenge, delivery and verification records to enforce expiry and request limits. Verifying an address does not merge separate sign-ins.

Billing Information: If you purchase a Licensed Edition tier, we collect the necessary information to process your transaction (name, email, company, and payment details). Payment processing is handled entirely by our secure, PCI-compliant third-party payment provider, Stripe; Dekglas does not store your raw credit card numbers.

Trial Eligibility: When you request a card-required Business trial, Stripe collects your card through its hosted setup page. We retain your verified email and a Stripe-provided card fingerprint to recognize a card that has already been used for a trial. These records enforce one trial per account, email, or card; we do not receive or store your card number. Card setup does not start a paid subscription, and the trial does not charge or become paid automatically. A separate purchase is required for paid access.

Account Recovery: If you request access through a replacement sign-in, we retain its verified account identifier and email, your consent, and the support review record to verify ownership and prevent unauthorized transfers. Approval retires the old sign-in and its active connected license keys. Billing contact synchronization completes before the replacement sign-in receives billing access. Purchase history remains intact.

Information You Provide to Us

If you contact us by email or through our licensing inquiry form, we retain the contact details, organization information and message you provide to respond to your inquiry. The form also uses short-lived request records and hashed network addresses to limit abuse and duplicate submissions. Those records expire within 24 hours and are removed automatically, which can take several more days. Operational logs contain no form contents and are retained for seven days. We do not sell or rent your contact information. We use service providers for account sign-in, payments, and email delivery, and share the information needed to provide those services.

Changes to This Policy

If our data practices change, we will update this policy and detail exactly what is collected and why.