Privacy policy

Last updated: September 2026

1. At a glance

This site is deliberately simple. It sets no cookies and uses no tracking, no analytics and no third-party services. Fonts, images and scripts are served exclusively from our own servers; opening this page creates no connection to Google, to a content delivery network or to a social network.

The only personal data processed when you simply read this page is what our web server has to record in order to deliver the page at all.

2. Controller

3. Cookies, tracking and analytics

Cookies: none are set.

Language preference: if you choose a language at the top of the page, that choice is stored in your browser's local storage under the key nitor.locale. The value stays on your device and is never transmitted to us. You can delete it at any time through your browser's site data.

Tracking and analytics: we use no analytics, no tracking pixels, no profiling and no advertising.

4. Server log files

When this page is opened, the server automatically records what your browser sends:

• the IP address of the requesting device
• the date and time of the request
• the file requested
• the HTTP status code
• the referring page, where transmitted
• browser and operating system

The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in reliable operation and in defending against attacks. Log files are deleted after seven days at the latest, and in the event of a concrete security incident after 30 days at the latest. These records are not combined with any other data source.

5. Hosting in Europe

The servers are operated by IONOS SE, Webtropia (myLoc managed IT AG), netcup GmbH and Hetzner Online GmbH, all with locations in the European Union. A data processing agreement under Art. 28 GDPR is in place with each. Your data is processed exclusively within the European Union; no transfer to a third country takes place.

6. Contacting us by email

If you write to us, we process your details solely in order to deal with your enquiry. The legal basis is Art. 6 (1) (b) GDPR where a contract is being initiated or performed, and otherwise Art. 6 (1) (f) GDPR. Your message is deleted once it is no longer needed and no statutory retention obligation prevents it.

7. Order number and activation

Nitor is unlocked with the order number from your purchase confirmation and the email address given with it. When these are entered, and at irregular intervals afterwards, the program checks the activation against our licence server. What is transmitted: the order number, the email address, an identifier derived from your device environment in order to keep the licence to your household, the platform and the version of the program, and — technically unavoidable — your IP address.

The identifier is formed on your own computer: a checksum is derived from a few stable characteristics of the device environment, and only that checksum is sent. The characteristics themselves never leave your computer. IP addresses, network adapter addresses and serial numbers of attached drives are not part of it.

The legal basis is Art. 6 (1) (b) GDPR (performance of the licence contract) and Art. 6 (1) (f) GDPR (legitimate interest in preventing unlicensed use).

Your photographs play no part in that check. No images and no thumbnails are transmitted, no file names and no folder paths, no checksums and no analysis results. Once activated, the program works without an internet connection.

8. Purchase and payment

If you buy a licence, we process the data required to perform the contract (name, email address, billing address, order and payment details) on the basis of Art. 6 (1) (b) GDPR. Retention periods under commercial and tax law of six and ten years respectively (§ 257 HGB, § 147 AO) remain unaffected.

Payment is handled by Stripe Payments Europe, Limited, 25/28 North Wall Quay, Dublin 1, Ireland. Your payment details are transmitted directly to Stripe; we never receive full card details.

Stripe offers several payment methods, among them PayPal and Amazon Pay as well as cards. If you choose one of those, its provider also receives the data needed for that payment and its own privacy notice applies in addition. Stripe's notice is at stripe.com/privacy.

9. Your rights

You have the following rights in relation to us:

• access to the data held about you (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• objection to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR)

Write to privacy@liternum.eu. You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR); the authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.

10. Changes to this notice

If the service or the legal situation changes, we will adapt this notice. The version published here is the one that applies.