Privacy Policy

Last updated: March 25, 2026

1. Data Controller

• Controller: Roberto García Collado (RGC Softnet)
• Email: hola@kartush.app
• Address: Narón, A Coruña, Spain
• Website: https://kartush.app

2. Core Principle

Kartush has been designed to operate without collecting personal data from users. The developer (RGC Softnet) does not collect, store, transmit, or process any personal data through the application.

3. Data the Developer Does NOT Collect

RGC Softnet does not collect, directly or indirectly:

• Names, email addresses, phone numbers, or any data entered by the user in the application.
• Usage data, proprietary analytics, telemetry, or behavioral metrics.
• Location data.
• Device identifiers, tracking cookies, or fingerprinting techniques.

4. Local Storage

All data generated by the user (projects, settings, images, HTML signatures) is stored exclusively in the local storage (localStorage) of the integrated WebView2 component, on the user’s device. The developer has no access to this data at any time.

Deletion of this data is the user’s responsibility, either by uninstalling the application or by manually clearing the application data from Windows settings.

5. Network Connections

Kartush does not initiate internet connections on its own. There are no backend servers, cloud databases, or synchronization services operated by RGC Softnet.

The only network connections that may occur are those made by third-party components integrated into the runtime environment:

• Pro License Verification: performed through the official Microsoft Store API, managed entirely by Microsoft Corporation. This verification may transmit Store and device identifiers to Microsoft servers.
• WebView2 (Microsoft Edge): Kartush uses Microsoft’s WebView2 component as its rendering engine. Microsoft may collect diagnostic and performance data through this component, in accordance with its own privacy policy. The developer has no control over these transmissions nor access to the data collected by Microsoft.

For more information about data processing by Microsoft, see the Microsoft Privacy Statement.

6. kartush.app Website

This website is a static informational page that:

• Does not use tracking, analytics, or advertising cookies.
• Uses only strictly necessary technical cookies (cookie acceptance).
• Does not integrate third-party services that collect data (no Google Analytics, no Facebook Pixel, no trackers).
• Loads fonts from Google Fonts, whose privacy policy can be found at https://policies.google.com/privacy.

7. Third-Party Services

The application does not integrate analytics, advertising, social media, or any other third-party services that collect user data, with the sole exception of the Microsoft components described in section 5.

8. Legal Basis for Processing (GDPR)

Since RGC Softnet does not collect or process personal data, no legal basis under Article 6 of the General Data Protection Regulation (EU) 2016/679 is applicable.

Any data processing that may arise from Microsoft components (WebView2 and Microsoft Store) is governed by the privacy policy and legal bases established by Microsoft Corporation as an independent data controller.

9. User Rights

Although RGC Softnet does not process personal data, users may exercise at any time the rights of access, rectification, erasure, portability, restriction, and objection provided for in Articles 15 to 22 of the GDPR and in Spanish Organic Law 3/2018 of December 5 on the Protection of Personal Data and guarantee of digital rights (LOPDGDD), by writing to hola@kartush.app.

Users also have the right to file a complaint with the Spanish Data Protection Agency (AEPD), located at C/ Jorge Juan 6, 28001 Madrid, Spain, or through its website: https://www.aepd.es

10. Backups

Kartush does not offer cloud backup services. It is the user’s sole responsibility to maintain backups of their data using the Export Configuration (JSON) function included in the application. RGC Softnet is not liable for loss of locally stored data.

11. Security

Since no data is transmitted to or stored on external servers, the risk of data leakage by RGC Softnet is nonexistent. License verification credentials are stored locally with HMAC-SHA256 protection.

12. Minors

Kartush is not intended for users under 16 years of age pursuant to Article 8 of the GDPR and Article 7 of the LOPDGDD. We do not collect data from any user, regardless of their age.

13. International Transfers

RGC Softnet does not carry out international data transfers. Microsoft components may transfer data to servers located outside the European Economic Area in accordance with the legal mechanisms established by Microsoft Corporation (standard contractual clauses, adequacy decisions, etc.). For more information, see the Microsoft Privacy Statement.

14. Applicable Law and Jurisdiction

This privacy policy is governed by Spanish law, in particular by the General Data Protection Regulation (EU) 2016/679 and Spanish Organic Law 3/2018 of December 5 (LOPDGDD). For any dispute arising from the interpretation or application of this policy, the parties submit to the Courts of Ferrol (A Coruña), Spain, as the seat of the judicial district to which the controller’s domicile belongs.

15. Modifications

RGC Softnet reserves the right to update this privacy policy at any time. Any changes will be published on this page with the update date.

16. Contact

For any privacy-related inquiries or to exercise your rights:
Email: hola@kartush.app
Controller: Roberto García Collado (RGC Softnet)
Address: Narón, A Coruña, Spain