Hidden Tokens: privacy policy
Updated 27 October 2026 · publisher: Tardigrade SARL · contact: info@hiddentokens.com
This policy covers the hiddentokens.com website and our business relationship with you (questions, quotes, orders, licences). The Hidden Tokens software itself is covered in one sentence: it encodes your files on your computer, and we receive none of them.
Who we are
The data controller is Tardigrade SARL, publisher of Hidden Tokens, 13, rue Ahmed El Mejjati, Rés. Les Alpes, 1st floor no. 8, Maârif, Casablanca, Morocco (ICE 003463957000076 · RC 620437 · IF 65908714). Email: info@hiddentokens.com · WhatsApp: +212 680 092 567.
What the software sends us: nothing
Your files, their encoded copies, the encoding key and the logs stay on your computer, or on your organisation's own file share. The licence key is checked on your computer, without a network call. The desktop app's only outgoing connection is the update check on GitHub: it sends your IP address and the installed version, no file, code or key. The browser extension talks only to the app on your computer: see its privacy policy.
What the website and the business relationship collect
| Data | Why | Who handles it |
|---|---|---|
| Contact form: plan, number of seats, country, organisation, company number, name, work email, phone, message | To reply, send a pilot or a quote (steps prior to a contract) | Us; the form is hosted by Netlify |
| Online order: name, email, organisation, billing address, payment details | To take payment, invoice and issue your licence (contract, accounting obligations) | Polar, merchant of record, collects payment and invoices; we receive the order and the licence holder's name. We never see your card details. |
| Licence activation page: your purchase key or the order reference | To return your licence key (contract) | Our function on Netlify asks Polar for the order; neither the key nor your email is logged |
| Audience measurement: pages viewed, device, approximate location, IP address sent to Google | To understand how the site is used, only if you accept (consent) | Google Analytics 4. Nothing is loaded until you click “Accept”; your choice is kept six months |
| Messages you send us by email or WhatsApp | To answer you | Us; WhatsApp is provided by Meta |
We never ask for a file through the website: the form only sends your contact details.
Recipients
We do not sell, rent or share your data. It is handled only by the providers listed above, for the purpose stated: Netlify (hosting, form, licence function), Polar (payment and invoicing), Google (audience measurement, with your consent), GitHub (software downloads and updates), Meta (WhatsApp, if you write to us there). Some are located outside Morocco and the European Union, notably in the United States; these transfers rely on the safeguards those providers offer.
How long we keep it
Prospect data: up to 3 years after our last exchange. Customer data: for the duration of the subscription, then for the periods required by accounting and tax law. Your cookie choice: six months.
Your rights
Under Moroccan law no. 09-08 and, if you are in the European Union, under the GDPR, you may access, correct or erase your data, object to its use, ask for a copy and withdraw your consent at any time (the “Cookies” link at the bottom of each page reopens the choice). Write to info@hiddentokens.com; we reply within one month. You may also complain to the CNDP (cndp.ma) or to the data protection authority of your country.
Changes
We publish any change on this page, with its date.