This Privacy Policy explains how we collect and use your personal data when you visit our website, purchase a license, join our waitlist or newsletter, or use the ClickMimic desktop app (together: the “Service”).
Where we say “we”, “us” or “our”, we mean Łukasz Kaczmarczyk, the individual creator and operator of ClickMimic, based in Poland (EU).
1. Controller & contact
Controller:
Łukasz Kaczmarczyk
ul. Leszczyńskiego 4 lok. 25
50-078 Wrocław
Poland (EU)
Contact emails:
- Privacy: [email protected]
- Support: [email protected]
We are responsible for deciding how and why your personal data is processed when you use ClickMimic.
2. Data we collect
We only collect data that we need to provide the Service, comply with the law and improve security, stability and user experience.
2.1 Account & purchase data
When you buy ClickMimic through our payment partners, we may receive:
- Name
- Email address (used for license delivery and important transactional messages)
- Billing country
- Transaction details (product purchased, price, currency, tax status, transaction ID, timestamps)
We work with:
- Gumroad – Merchant of Record and payment platform for ClickMimic licenses and other digital products.
We do not store full payment card details. Payments are handled securely by Gumroad as an independent controller for billing data.
2.2 Product, license & trial data
When you activate and use the ClickMimic desktop app, including when you use a free trial, we may process:
- License key and activation status (trial or paid)
- Number of active devices / seats (for example, hashed or pseudonymised device identifiers)
- App version and build
- Basic technical information (for example, operating system type/version, interface language)
This information is used to:
- validate your license or trial,
- manage device limits,
- deliver updates and compatibility information,
- protect against obvious license or trial abuse (for example, attempts to generate unlimited trials on the same device).
If you use a time-limited trial (for example, a 7-day trial), we process the same categories of product and license data so that the trial works correctly, we can determine when it expires, and we can prevent clear abuse of the trial system. Diagnostic logs for trial users are handled as described in section 2.3.
2.3 Diagnostic data & logs
The ClickMimic app keeps logs locally on your own device to help with troubleshooting (for example: error messages, timestamps, module names).
By default:
- we do not automatically receive your logs;
- we do not design logs to contain personal identifiers such as your IP address;
- we only see logs if you actively choose to send them to us (for example, as an attachment in a support email).
When you send us logs or screenshots (whether during a paid license or a trial), they may contain technical details about your system and app usage. We use them only to diagnose and fix issues, improve stability and performance, and detect obvious abuse or security problems.
2.4 Support & communication
If you contact us via email or any contact form, we process:
- Your email address and name (if provided)
- The content of your message and any attachments (for example, logs, screenshots)
- Any other information you choose to provide
We use this data to respond to your enquiry, keep a history of issues and improve our support processes.
2.5 Website, cookies, waitlist forms & analytics
When you visit our website (for example, clickmimic.com), our hosting infrastructure (jchost) may automatically collect standard server log data, such as:
- IP address
- Date and time of request
- URL visited and referrer
- Browser type and version
- Operating system
These logs are used for security (for example, preventing abuse), troubleshooting and basic performance monitoring and are kept only for a limited time by the hosting provider.
If you submit forms on our website (for example, to join the early-access waitlist), we process the data you enter in the form, such as:
- Email address
- Preferred platform or similar preferences (if shown on the form)
- Confirmation that you agreed to any consent text or checkbox displayed on the form
Our waitlist and newsletter forms are provided by MailerLite. When you submit the form, your data is sent directly to MailerLite, which also receives technical data such as your IP address, device or browser information and the date and time of subscription. MailerLite uses this to provide double opt-in and to protect against abuse and spam.
MailerLite uses a double opt-in process: after you sign up, you receive an email asking you to confirm your email address. Your subscription is only activated after you click the confirmation link. MailerLite stores the fact that you have confirmed (including a timestamp and IP address) as proof of consent to receive our waitlist or newsletter emails.
At launch:
- We use only essential technical cookies (if any), needed for security and basic site operation (for example, remembering minimal settings).
- We do not use third-party analytics tools that track individual visitors across sites (such as Google Analytics).
- We do not use marketing or advertising pixels (Meta Pixel, Google Ads tags, etc.).
- The embedded MailerLite waitlist form may use its own strictly necessary technologies (including cookies or similar) to operate the form, prevent abuse and perform double opt-in. We do not currently use MailerLite for on-site behavioural analytics or ad retargeting.
In the future, we may introduce privacy-friendly, cookieless analytics that do not track individuals and do not set additional cookies. If we introduce any analytics or marketing tools that rely on non-essential cookies, we will update this Policy and, where required, show a cookie banner to collect your consent before those cookies are set.
3. Purposes & legal bases (GDPR Article 6)
We process your personal data only where we have a valid legal basis under the GDPR.
3.1 Contract (Art. 6(1)(b) GDPR)
To fulfil a contract with you or to take steps at your request before entering into a contract, we process data to:
- Provide access to the app and website
- Issue and manage licenses and seats
- Enable and manage free trials that you request (for example, a 7-day trial of ClickMimic)
- Deliver updates, bug fixes and improvements
- Provide customer support and technical assistance
3.2 Legal obligations (Art. 6(1)(c) GDPR)
We may process data where necessary to comply with legal obligations, such as:
- Tax and accounting rules (for example, records of sales, refunds, chargebacks and invoices)
- Financial and consumer protection laws
- Responding to lawful requests from authorities (where applicable)
3.3 Legitimate interests (Art. 6(1)(f) GDPR)
We may process your data for our legitimate interests, provided these are not overridden by your rights and freedoms, for example:
- Preventing fraud, license abuse and obvious trial abuse
- Handling payment disputes, chargebacks and defending against payment fraud
- Securing our systems and infrastructure
- Debugging, improving and optimising our products and website
- Responding to enquiries from potential customers, partners or media
- Enforcing our terms and policies, and defending legal claims
Where required, we conduct a balancing test to ensure that our legitimate interests do not unduly impact your privacy.
3.4 Consent (Art. 6(1)(a) GDPR)
We rely on your consent for:
- Optional marketing communication (for example, newsletters or early-access waitlist updates, where consent is required by law)
- Any non-essential cookies or analytics that require consent (if introduced in the future)
You can withdraw your consent at any time:
- For emails: via the “unsubscribe” link or by contacting us.
- For cookies/analytics: via your browser settings or via any future “Cookie settings” tool on our website.
Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
4. Who processes your data
We use third-party providers to help us run the Service. They act either as processors (processing data on our behalf) or as independent controllers for their own purposes.
4.1 Payments & billing
- Gumroad – Merchant of Record and payment platform for ClickMimic licenses and other digital products. Role: independent controller for payment and billing data. Handles payment methods, tax/VAT calculations, invoicing and certain fraud and risk checks.
We receive only the information we need to fulfil your order (for example, product purchased, email, country, basic billing metadata).
Refunds, chargebacks and payment disputes: if you request a refund, or initiate a chargeback or similar dispute with your bank or payment provider, Gumroad may share with us limited information about the refund or dispute (for example, transaction identifiers, amounts, dates and basic reason codes). We use this information to respond to the refund or dispute, process it correctly, update your license status, keep accurate accounting records and defend against fraud or abuse. We keep this information only for as long as necessary for these purposes and to comply with our legal obligations.
4.2 Hosting & infrastructure
- jchost – web hosting provider for our website and file downloads. Role: typically a processor, storing website content and server logs on our behalf. May collect server logs (IP address, user agent, timestamps) for security and maintenance.
- Cloudflare – domain, DNS and security/CDN provider for clickmimic.com. Role: independent controller or joint controller in relation to certain security and performance data (such as IP address for DDoS protection and caching).
4.3 Waitlist & newsletters
MailerLite – email marketing and automation platform that powers our early-access waitlist and (optionally) newsletters. Role: generally a processor, managing subscriber lists, sending confirmation and campaign emails, and tracking delivery status and basic engagement (for example, open and click rates) so we can understand which messages are useful and keep our list healthy. MailerLite receives your email address, subscription status, and technical data such as IP address and device information collected when you subscribe or interact with emails.
4.4 Email & support
Google (Gmail) – email service used for addresses like
[email protected] and [email protected] (via forwarding from our
domain). Role: generally a processor, processing email data on our behalf within our accounts.
If we later add a dedicated helpdesk or ticketing system, we will list it here in an updated version of this Policy.
4.5 Analytics & marketing tools
At launch:
- We do not use third-party analytics tools that set cookies (such as Google Analytics).
- We do not use marketing pixels or retargeting tags.
If we start using any analytics or marketing tools in the future, we will update this section with the provider’s name and role, and ensure that any required consents and safeguards are in place.
We do not sell your personal data.
5. International transfers
Some of our service providers (for example, payment processors or email services) may be located outside the European Economic Area (EEA) or the United Kingdom (UK), or may store data in data centres located in third countries.
Where this leads to an international transfer of personal data, we ensure that:
- The European Commission has issued an adequacy decision for the destination country; or
- We have implemented Standard Contractual Clauses (SCCs) approved by the European Commission (and, where relevant, UK equivalents); and
- Where necessary, we apply additional technical and organisational safeguards.
You can contact us at [email protected] for more information about the specific safeguards used for your data.
6. Retention
We keep your personal data only for as long as necessary for the purposes described in this Policy, or as required by law.
Indicative retention periods:
- Account & billing records: kept for the period required by tax and accounting laws (often several years, depending on the jurisdiction). This may include records of sales, refunds, chargebacks and related correspondence.
- License, activation and trial data: stored for the life of the license or trial and for a reasonable period after expiry to manage renewals, disputes, security checks and audit trails, including records of any license changes following refunds or chargebacks.
- Diagnostic logs we receive from you: kept for approximately 90 days after an issue is resolved, unless we need them longer for an ongoing security or legal matter.
- Support emails and tickets: stored for up to 12 months after resolution, unless we are legally required to keep them longer or need them to defend legal claims.
- Waitlist & marketing email data: retained until you unsubscribe or object, ask us to delete your data, or until we decide to delete inactive contacts as part of regular list maintenance. Unconfirmed double opt-in sign-ups may be deleted automatically after a limited period.
When data is no longer needed and no legal retention duty applies, we delete or irreversibly anonymise it.
7. Your rights
Under the GDPR (and similar data protection laws), you have several rights in relation to your personal data. These may include:
- Right of access: to know whether we process your personal data and to obtain a copy of it.
- Right to rectification: to correct inaccurate or incomplete data.
- Right to erasure (“right to be forgotten”): to request deletion of your personal data where suitable (for example, when it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis).
- Right to restriction of processing: to ask us to limit processing in certain situations (for example, while we verify accuracy or handle an objection).
- Right to data portability: to receive your data in a structured, commonly used, machine-readable format and to transmit it to another controller, where processing is based on consent or contract and carried out by automated means.
- Right to object: to processing based on our legitimate interests, on grounds relating to your particular situation, and to direct marketing at any time (including profiling for marketing purposes).
- Right to withdraw consent: where processing is based on your consent, you can withdraw it at any time. This will not affect the lawfulness of processing before withdrawal.
To exercise your rights, contact us at [email protected]. We may need to verify your identity before fulfilling your request.
You also have the right to lodge a complaint with your local data protection supervisory authority if you believe our processing infringes data protection laws.
8. Cookies & similar technologies
At launch:
- We use only essential, technical cookies or similar technologies (if any), which are necessary for security and basic functionality of the website.
- We do not use analytics or marketing cookies.
- The embedded MailerLite waitlist form may set minimal cookies or use similar technologies that are strictly necessary to operate the form and provide double opt-in.
Because we currently do not rely on non-essential cookies, you may not see a full cookie consent banner. If in the future we introduce analytics or marketing tools that require consent, we will update this Policy and provide a clear cookie banner or preference centre allowing you to accept or reject non-essential cookies.
You can always control cookies through your browser settings (for example, blocking or deleting cookies).
9. Security
We take appropriate technical and organisational measures to protect your personal data, including:
- Encryption in transit (HTTPS/TLS) for website traffic where supported by our infrastructure
- Access controls and authentication for accounts and internal systems
- Principle of least privilege for staff and service accounts
- Regular updates of software and infrastructure where possible
However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If we become aware of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and the relevant authorities as required by law.
10. Children & minimum age
ClickMimic is a tool designed for traders and adults who use online brokerage platforms.
You should only use ClickMimic if you are old enough to legally enter into trading relationships and use brokerage services in your country (which is typically 18+ in most jurisdictions).
We do not knowingly collect personal data from children who are below the relevant legal age for using trading services. If you are a parent or guardian and believe that a child has provided us with personal data, please contact us at [email protected] and we will take appropriate steps to remove the data.
11. Changes to this Policy
We may update this Privacy Policy from time to time, for example when we introduce new features or services, change providers or infrastructure, or are required to do so by law.
When we update the Policy, we will:
- Publish the updated version on this page with a new “Last updated” date; and
- Where the changes are material, provide additional notice (for example, via email, in-app message or a prominent banner on the website).
Please review this Policy periodically to stay informed about how we process your data.
12. Contact
If you have any questions, requests, or concerns about privacy or this Policy, you can contact us at:
- Postal address: ul. Leszczyńskiego 4 lok. 25, 50-078 Wrocław, Poland
- Privacy: [email protected]
- Support: [email protected]