Home / Privacy

Privacy notice

Written to be read, not to be skipped. If anything here is unclear, ask and I will rewrite it.

Last updated: 6 October 2026.

The whole thing in four lines. This site has no advertising, no third-party trackers and no analytics. I only hold what you type into a form, plus what a paid app needs to check its licence. I never sell or share it. You can have it deleted by asking.

Who is responsible

ColdByte is run by one independent developer. Questions about anything on this page go through the contact form, and I answer them myself.

What is collected, and why

If you subscribe to updates

Your email address, the date, the page you subscribed from, the language you were reading in, and the IP address the request came from. The email address is how I send you updates, and the language decides whether they arrive in Arabic or English. The date, page and IP exist so I can show a signup was genuine if an address is ever reported as added without permission.

If you send a request or a message

Whatever you typed into the form — your name, your email address, and the content of your message — plus the date, the language and the IP address. It is used to answer you and, if the conversation continues, to do the work we agree on.

If you just read the site or download an app

Nothing is collected by me. There are no cookies, no analytics scripts, no advertising pixels and no social-media trackers on any page. The web server itself keeps standard access logs (IP address, file requested, time) as every web server does; those are kept by the hosting provider for a short period and I do not use them to build any profile of you.

One external request is made by your browser: the page fonts are loaded from Google Fonts, which means Google receives your IP address when a page loads. That is the only third party involved in viewing this site.

The apps themselves

Each app's page says what that app sends and where. Apolo cPanel, for example, keeps its settings on your own PC and talks only to the Apollo you point it at — plus your DNS provider, if you set up remote access. It sends nothing to me.

Paid apps (ColdPulse and ColdSub): licence checks

So the free trial works and a licence runs on one PC at a time, the app contacts coldbyte.dev on first launch and then now and then when you are online. It sends: a code that identifies the PC (worked out from its hardware; it contains neither your name nor your files), the PC name as Windows shows it, the app version, and the licence number if there is one. The IP address and date of the last check are stored with it. When you buy a licence, your name and email are stored so I can send you the key.

This is used for licensing only: starting the trial, stopping it from repeating on the same PC, and knowing which PC a licence is on. It is kept for as long as the licence or trial exists, and you can ask me to delete it at any time (deleting a trial record does not grant a new trial).

If coldbyte.dev cannot be reached, the app also reads one public file on GitHub to see whether I have published a "safe shutdown" notice (see the terms). Nothing about you is sent, but GitHub sees your IP address, like any website you visit.

When you buy a licence

You pay on the payment page of Moyasar, a Saudi payment company licensed by the Saudi Central Bank. You enter your card details there directly: they do not pass through this site, I never see them, and they are not stored with me. Moyasar handles them under its own privacy policy.

What I keep about the order: your email address, your name if you gave one, the app, the amount, the date and Moyasar's invoice number. I need these to send you the key, to send it again if you lose it, and to refund you if you ask; they are kept for as long as the licence exists and for as long as the law requires sales records to be kept.

ColdSub: API keys and subtitle text

ColdSub keeps your API keys on your PC only, encrypted with Windows' own protection (DPAPI) tied to your Windows account, and never sends them to me. When you translate, the app sends the subtitle text and your key directly to the provider you picked (Google, OpenAI, Anthropic or OpenRouter), never through any server of mine, and that provider handles it under its own privacy policy. Note: on Gemini's free tier, Google may use the text to improve its products. The "OpenAI cloud" option for video subtitles sends the video's audio to OpenAI the same way.

Whisper "On this PC" and picture-subtitle conversion run entirely on your PC. When the parts are downloaded for the first time, the app contacts their distribution sites (such as nuget.org, huggingface.co, gyan.dev and GitHub), which see your IP address like any website. The app also asks coldbyte.dev once per start whether a newer version exists; only the app name and version are sent.

ColdGet browser extension

This section last updated: 3 October 2026.

The ColdGet extension for Chrome and Edge hands downloads to the ColdGet app installed on your PC. This is everything it handles:

  • When you start a download: the download's address, the cookies for that download's site, the address and title of the page the download was started from, and any SHA-256 fingerprints printed on that page.
  • On the page you are viewing: the addresses of video and audio files that page loads.
  • When you press "All file links": the links on that page.

Where it goes: only to the ColdGet app installed on the same PC (through the browser's "native messaging"). Nothing is sent to ColdByte's servers or to any third party. No analytics, no advertising, no account.

Why: so ColdGet can download the file you asked for (sites behind a login need the cookies) and verify it.

What is stored: the extension stores only its on/off setting, and a temporary per-tab list of media that is cleared when the tab closes or the browser exits. The ColdGet app keeps your download list on your PC until you remove it.

Limits: the extension does not work on YouTube or on paid streaming services, and it never bypasses DRM.

Privacy questions: hello@coldbyte.dev.

What is never done

  • Your data is never sold, rented or traded. Not now, not later, not as part of any deal.
  • Your email address is never passed to an advertiser or a data broker.
  • You are never added to the mailing list because you sent a message. Subscribing is a separate, deliberate action.
  • No profile is built about you, and nothing about your behaviour is tracked across other websites.

Who else can see it

Only these, all of them necessary to run a site that sells licences:

  • The hosting provider, which stores the files and runs the mail server.
  • Email providers — yours and mine — because that is how email reaches you.
  • Google Fonts, as described above, for the typeface only.

WhatsApp: the WhatsApp button on this site is a plain link; no WhatsApp code is loaded here. If you choose to message me there, the conversation happens inside WhatsApp (Meta) under its own privacy policy, and I see your number and WhatsApp name.

Moyasar: the payment provider, and only if you buy a licence. It receives the payment details you enter on its page, and the amount and description of the order.

Nobody else.

How long it is kept

  • Subscribers: until you unsubscribe, then marked inactive and deleted in the next clear-out.
  • Messages and requests: up to two years, so I can find the history if you come back about the same thing.
  • Anti-spam records: about 48 hours.

Your choices

  • Unsubscribe with your mail app's own Unsubscribe button, or the link at the bottom of every email — one button press, no login, no survey. (It takes a press rather than just opening the link because email security scanners open links automatically, and nobody should be unsubscribed without knowing.)
  • Ask for a copy of everything held about you, and I will send it.
  • Ask for deletion, and it is deleted — except where I have to keep a purchase record for tax reasons.
  • Correct anything that is wrong, just by telling me.

Use the contact form for any of these. There is no fee and no form to fill in beyond that one.

Security

The site is served over HTTPS. Submissions are stored in a folder that is not reachable from the web. I do not ask for passwords or payment details anywhere on this site, and you should never send them to me — if a message ever appears to come from ColdByte asking for either, it is not from me.

Children

This site is not aimed at children, and I do not knowingly collect anything from them. If a child has sent me something, tell me and I will delete it.

Changes

If this notice changes in a way that matters, the date at the top changes and subscribers are told by email. Changes are never applied retroactively to data already collected under the old version.

Questions about this notice? Ask me directly — that is what the form is for.