Privacy Policy

Last updated: July 2026 (rev. 4) — Data Controller: Stefano Pretoni, info@fantago.com

1. Data Controller

Stefano Pretoni
Trading as: Fantago
Email: info@fantago.com
Website: https://www.fantago.com

2. Data Collected on This Website

This website does not use advertising networks or marketing trackers. With your explicit consent, it uses Google Analytics to collect anonymous usage statistics. The following data may be processed:

• Contact inquiries: when you send an email to support@fantago.com or info@fantago.com, we receive your email address and the content of your message. This data is used solely to respond to your inquiry and is not shared with third parties.
• Technical data (server logs): hosting infrastructure may automatically log IP addresses, browser type, and pages visited for security and operational purposes. These logs are retained for a maximum of 30 days and are not used for profiling.
• Cookie preferences: your cookie consent choice is stored in your browser's localStorage. This data never leaves your device.
• Download tracking: when you download an application, the Stream Deck plugin, or a device handler from this website, an anonymous event is recorded server-side. The data stored is: the name of the file downloaded, the timestamp, and your approximate location (country and city) derived from your IP address using a local GeoIP database. For device handlers, the record also states which kind of client made the request — a web browser, the Fantago application itself, or an automated crawler — so that automated traffic can be excluded from the counts. Your IP address and your browser's user agent string are immediately discarded and are never stored; only the resulting country, city and client type are kept. No cookies are set and no information is stored on your device for this purpose. Records older than 24 months are automatically deleted. Legal basis: legitimate interest (Art. 6.1.f GDPR) — understanding which platforms and integrations are most used in order to prioritise development.
• Developer plugin submissions: if you submit a custom device handler plugin via email, we receive and process your name, email address, and the content of the submitted file. This data is used solely to evaluate the contribution and, if accepted, to maintain attribution in the published plugin. See EULA §5 — Community Plugin Contributions for the full terms.

3. Third-Party Services on This Website

Google Fonts (consent required): When you accept optional cookies, this website loads typography fonts from Google Fonts (fonts.googleapis.com). This transmits your IP address and browser information to Google's servers. If you choose "Essential Only", no request is sent to Google Fonts. Google's privacy policy applies: https://policies.google.com/privacy.

Google Analytics (consent required): When you accept optional cookies, this website uses Google Analytics 4 (measurement ID: G-VD6DRJ9GGN) to collect anonymous usage data — pages visited, session duration, browser and device type. No personally identifiable information is collected. IP addresses are anonymised by Google before storage. If you choose "Essential Only", Google Analytics is never loaded. You can change your preference at any time via the Cookie Settings link in the footer. Google's privacy policy applies: https://policies.google.com/privacy.

Lemon Squeezy (e-commerce): The purchase checkout is handled by Lemon Squeezy. When you click "Buy", you are redirected to their secure checkout. Lemon Squeezy's privacy policy applies to all purchase transactions: https://www.lemonsqueezy.com/privacy.

4. Data Collected by the Fantago Software

The Fantago application is designed to operate entirely offline after the initial one-time activation. The software collects or transmits the following data:

• License activation: your license key and a hardware identifier (derived from your device's hardware) are transmitted to LemonSqueezy solely for the purpose of validating your license. This is a one-time operation.
• License deactivation: if you choose to deactivate your license, your instance ID is transmitted to LemonSqueezy to release the activation slot.
• Anonymous usage telemetry (opt-out, enabled by default): once every 24 hours, Fantago sends a small anonymous ping to fantago.com/ping.php. The ping contains:
  • App version (e.g. 2.9.9)
  • Operating system platform (win32, darwin, or linux)
  • License type: demo or pro
  • An anonymous installation ID: a one-way SHA-256 hash of your hardware identifier. It cannot be reversed or linked to your identity or your license key.
  • Approximate country and city, derived at the moment of the ping from your IP address using a local GeoIP database. Your IP address is immediately discarded and is never stored.
  • For Pro users only: a one-way SHA-256 hash of the license key, used exclusively to deduplicate statistics when a license is transferred to a new machine. The license key itself is never transmitted or stored in plain form.
  No device names, panel configurations, variable values, credentials, or log data are ever transmitted. Telemetry data is stored on servers located in the European Union (Italy, hosted by Aruba). Records for installations that have been inactive for more than 24 months are automatically deleted. You can disable telemetry at any time via Settings → Privacy within the Fantago application. When disabled, no outbound connections are made by the software except for license activation and actions you initiate manually.
• AI Assistant (opt-in, only when you configure a provider): If you enable the AI Assistant and configure a cloud AI provider (e.g. Anthropic Claude, Google Gemini, OpenAI, or any other compatible service) with your own API key, Fantago transmits directly to that provider the data needed to carry out your request — your natural-language instructions, relevant device names, and command/handler structures. This transmission goes directly from your Fantago installation to the AI provider you have chosen; Fantago's own servers are never involved and never receive or store this data. You are responsible for reviewing the privacy policy and terms of your chosen provider before enabling the feature. If you configure a locally-hosted model instead (e.g. via Ollama), no data ever leaves your machine. See EULA §6 — AI Assistant Features for the full terms governing this feature.
• Browser local storage (application interface): The Fantago web interface, served locally on your machine (typically at http://localhost:3001), stores the following data in your browser's localStorage to preserve your preferences between sessions:
  • UI theme and font size preferences
  • Dashboard section states (open/closed)
  • Table column widths and layout settings
  • Log panel filter settings and font size
  • Dismissed notice flags
  • AI assistant conversation history (stored under keys prefixed fantago_ai_history_). This may contain operational text you have typed in the AI panel. It can be cleared at any time using the clear button inside the AI assistant panel.
  All data listed above is stored exclusively in the browser of the machine running Fantago. It is never transmitted to any server, including Fantago's own servers, and contains no personally identifiable information.

5. Cookies and Local Storage

This website uses the following storage technologies:

• Essential technical cookies: required for the website to function correctly (e.g., session management). These cannot be disabled.
• Cookie consent preference: stored in localStorage under the key fantago_cookie_consent. This is purely local to your browser and is never transmitted.
• Google Fonts (optional): loaded only with your consent. May set a cookie related to font caching. Governed by Google's privacy policy.
• Google Analytics (optional): loaded only with your consent. Sets cookies (_ga, _ga_*) to distinguish users and sessions for anonymous traffic analysis. Retained by Google for 2 years.

We do not use advertising or social media tracking cookies. You can change your cookie preferences at any time via the Cookie Settings link in the footer of every page.

6. Legal Basis for Processing

• Contract performance (Art. 6.1.b GDPR): processing your license key for activation and support.
• Legitimate interests (Art. 6.1.f GDPR): server logs for security purposes; responding to contact inquiries; anonymous usage telemetry to understand version adoption, platform distribution, and geographic reach for the purpose of improving the product; anonymous download tracking to understand which platforms and integrations are most used. All data processed under this basis is minimised to non-identifying fields, stored in the EU, and retained for no more than 24 months.
• Consent (Art. 6.1.a GDPR): non-essential cookies and any optional communications.
• Consent (Art. 6.1.a GDPR): processing of developer plugin submissions — you initiate the contact and explicitly provide the data for the stated purpose of evaluation and publication.

7. Data Retention

• Contact emails: retained for the duration necessary to resolve your inquiry, and up to 2 years for support history.
• Server logs: maximum 30 days.
• License records: retained for the duration of the license relationship and up to 5 years for tax/accounting obligations.
• Telemetry records: retained as long as the installation is active. Records associated with installations that have sent no ping for more than 24 months are automatically deleted.
• Download tracking records: retained for a maximum of 24 months, after which they are automatically deleted.
• Developer plugin submissions: the author's name is retained in the published plugin metadata for the entire duration of publication. If a plugin is removed or you request withdrawal of your contribution, your personal data in the metadata will be deleted within 30 days. The email exchange used to evaluate the submission is retained for up to 2 years.
• Application browser local storage: retained in your browser until you clear it manually (via the AI panel, browser settings, or browser cache clearing tools). Fantago does not set any expiry on this data — it persists until you remove it.

8. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of access (Art. 15): request a copy of the personal data we hold about you.
• Right to rectification (Art. 16): request correction of inaccurate data.
• Right to erasure (Art. 17): request deletion of your personal data, subject to legal retention obligations.
• Right to restriction (Art. 18): request that we limit processing of your data.
• Right to data portability (Art. 20): receive your data in a structured, commonly used format.
• Right to object (Art. 21): object to processing based on legitimate interests.
• Right to withdraw consent: at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at info@fantago.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali): www.garanteprivacy.it.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. The website is served over HTTPS. License certificates are signed with HMAC-SHA256 and tied to hardware identifiers.

10. International Transfers

Your data may be processed by LemonSqueezy (United States) and Google (United States) for the purposes described above. These transfers are covered by Standard Contractual Clauses or adequacy decisions under GDPR.

If you choose to enable the AI Assistant feature, operational data you submit through it is additionally transmitted to the third-party AI provider you configure — typically Anthropic PBC, Google, OpenAI L.L.C., or another provider of your choice — which may process data outside the EU. This transfer is initiated directly by your Fantago installation, under your own account and API credentials, and is governed by the terms and privacy policy of the provider you select rather than by this Privacy Policy. Using a locally-hosted model instead avoids any such transfer entirely.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of the website or software after an update constitutes acceptance of the revised policy.

12. Contact

For any privacy-related questions or requests:
Stefano Pretoni — info@fantago.com