Privacy Policy
Effective date: April 1, 2026 · Outfoxed Software LLC (DBA Heathen Software)
This policy describes what information heathensoftware.com collects, why we collect it, and what we do with it. We have tried to write it in plain English. If anything is unclear, email us at hello@heathensoftware.com.
Short version: We collect the information you type into our dev kit request form. We use it to respond to your request and, if relevant, follow up about licensing. We do not sell it, share it with advertisers, or use it for anything unrelated to Heathen Software.
1. Who we are
Outfoxed Software LLC, doing business as Heathen Software, is a US limited liability company. We operate the website at heathensoftware.com and distribute the Heathen Windows Kernel Telemetry SDK.
For the purposes of EU data protection law, Outfoxed Software LLC is the data controller for personal information collected through this website.
2. Information we collect
Information you give us directly. When you submit the dev kit request form, we collect:
- First and last name
- Company name
- Work email address
- Job role
- A description of what you are building
- How you heard about Heathen (optional)
Information collected automatically. Like all web servers, our hosting provider (DreamHost) records standard access logs when you visit the site. These logs contain your IP address, browser type, operating system, the page requested, and the date and time of the request. We use these logs for security monitoring and diagnosing technical problems. We do not use them to build visitor profiles.
Information we do not collect. This website does not use advertising trackers, analytics scripts, or third-party cookies. We do not collect payment information directly — if you purchase a commercial license, payment is handled by Stripe, whose privacy policy governs that data.
3. How we use your information
We use the information from the dev kit request form to:
- Evaluate your request and respond within one business day
- Send you the dev kit download link and license agreement once approved
- Follow up about commercial licensing if your use case requires it
- Respond to questions or support requests you send us by email
We do not send unsolicited marketing email. If you receive email from us it is because you submitted a form or contacted us first.
4. Legal basis for processing (GDPR)
If you are in the European Economic Area, our legal basis for processing your personal information is:
- Legitimate interests — responding to a business inquiry you initiated and evaluating whether to provide you with SDK access
- Contract performance — if you enter into a license agreement with us, processing your contact and company information is necessary to perform that agreement
5. Third-party services
We use a small number of third-party services to operate this website:
- Web3Forms — receives your form submission and forwards it to us by email. Web3Forms acts as a data processor on our behalf. Their privacy policy is available at web3forms.com.
- DreamHost — hosts this website and retains standard server access logs. Their privacy policy is available at dreamhost.com.
- Stripe — processes payments for commercial licenses. We do not receive or store your full payment card details. Stripe's privacy policy is available at stripe.com.
- GitHub — hosts the public SDK repository. If you download files or open issues on GitHub, GitHub's privacy policy applies to that activity.
We do not sell your personal information to any third party. We do not share it with any party other than those listed above and only to the extent necessary to operate the service.
6. Data retention
We retain dev kit request information for as long as there is an active or potential business relationship, or for up to two years from the date of submission, whichever is shorter. If you request deletion, we will remove your information within 30 days except where we are required by law to retain it.
Server access logs are retained for up to 90 days and then deleted automatically by our hosting provider.
7. Your rights
Depending on where you are located, you may have the following rights regarding your personal information:
- Access — request a copy of the information we hold about you
- Correction — ask us to correct inaccurate information
- Deletion — ask us to delete your information
- Portability — receive your information in a portable format
- Objection — object to processing based on legitimate interests
- Restriction — ask us to restrict processing in certain circumstances
To exercise any of these rights, email hello@heathensoftware.com. We will respond within 30 days. We do not charge a fee for reasonable requests.
If you are in the EEA and believe we have not handled your information lawfully, you have the right to lodge a complaint with your local data protection authority.
8. Cookies
This website does not set cookies. We do not use advertising cookies, analytics cookies, or any other persistent tracking mechanism. If we add analytics in the future, we will update this policy before doing so.
9. Children
This website is directed at security and software engineering professionals. We do not knowingly collect personal information from anyone under the age of 16. If you believe we have inadvertently collected such information, contact us and we will delete it promptly.
10. Changes to this policy
If we make material changes to this policy, we will update the effective date at the top of this page. For significant changes, we will notify active license holders by email. Continued use of the website after a change constitutes acceptance of the updated policy.
11. Contact
Route your inquiry to the appropriate address and we will respond promptly:
- Privacy questions, data requests, or policy concerns: hello@heathensoftware.com
- Security vulnerability reports: security@heathensoftware.com
- SDK support: support@heathensoftware.com
- Company: Outfoxed Software LLC (DBA Heathen Software)
This privacy policy was written to be accurate and readable. It is not a substitute for legal advice. If you have specific legal concerns about data handling, please consult a qualified attorney.