Privacy Policy

This Privacy Policy explains what information we collect when you use the AAA Code website at https://aaa-code.app and the AAA Code desktop application.

1. Who we are

The data controller is LIU Haowen, a sole proprietor based in Hong Kong SAR, China. You can reach us at hwwn@live.com.

2. What we collect

Website hosting logs. Our website is hosted on Vercel. Standard hosting telemetry includes your IP address, user agent, request timestamps, and referrer.

Purchase data. Purchases are processed by Lemon Squeezy as Merchant of Record. Lemon Squeezy collects your name, billing email, billing country, and tax information. We receive order confirmations that include your billing email and the tier you purchased (Member, VIP Member, or VVIP Member); we do not see or store your card details.

License activation. When you activate a license, the application sends your license key and a non-reversible device fingerprint (a hash of machine identifiers) to a Cloudflare Worker we operate. This is used to bind a license to one device and to validate activations. Cloudflare may record the request IP and timestamp as part of standard hosting telemetry.

3. What we do NOT collect

We do not collect your prompts, code, conversations, or files. AAA Code talks to Anthropic’s API directly using your own API key; that traffic never touches our servers. The desktop application does not phone home on launch, does not send crash reports, and does not transmit usage analytics.

4. Legal bases (GDPR)

Where EU/UK data protection law applies, we process personal data on these bases:

• Contract performance — processing purchases and activating licenses;
• Legitimate interest — fraud prevention and security logging;
• Consent — where specifically required by law.

5. Third parties

• Vercel— website hosting (privacy policy).
• Lemon Squeezy— payments, tax handling, and license delivery (privacy policy).
• Cloudflare— license-activation Worker (privacy policy).
• Anthropic— you bring your own API key; your relationship with Anthropic is governed by Anthropic’s own terms. Anthropic is not a sub-processor of ours.

6. Retention

Hosting logs are retained for up to 30 days. Purchase records are retained for as long as required by applicable tax and accounting law in Hong Kong SAR, China. License-activation records are retained for the lifetime of the license.

7. Your rights

Depending on where you live, you may have rights under the EU/UK GDPR, the California Consumer Privacy Act (CCPA), and the Hong Kong Personal Data (Privacy) Ordinance (PDPO), including the right to access, correct, delete, export, or object to the processing of your personal data. To exercise any of these rights, email hwwn@live.com.

8. Cookies

The website does not set first-party tracking cookies. Vercel may set functional cookies required for hosting and security.

9. International transfers

Because our third-party providers operate globally, your data may be processed outside of your home country. We rely on the safeguards implemented by our providers (including Standard Contractual Clauses where applicable) for any cross-border transfers.

10. Children

The Service is not directed to children under 13. If you are under 16, you may only use the Service with parental or guardian consent where local law requires it.

11. Changes

We may update this Privacy Policy from time to time. Material changes are reflected by updating the effective date at the top of this page.

12. Contact

For any privacy question or request, email hwwn@live.com.