This policy explains what information HENGCHENG LLC ("we", "us") processes when providing the Nullprint software and related services, and how we use it. Nullprint is local software: most of your data stays on your own computer.
1. Data that stays on your computer
The following data is stored on your computer and is not uploaded to our servers:
- browser data for each profile, such as cookies, login sessions, browsing history and local storage (if you turn on cookie cloud sync, the cookies of the profiles you choose are also stored on our servers, end-to-end encrypted — see section 2);
- the login password remembered by the app, and the usernames, passwords and 2FA secrets saved in profiles (encrypted by your operating system's keychain);
- your local API key.
If you choose to export a diagnostic bundle and send it to us, API keys, proxy addresses and credentials are automatically removed from it.
2. Information stored on our servers
- Account information: email address, username, member names, roles and permission settings, and the credentials used to verify sign-in.
- Device information: the name, platform, app version and last-used time of each device that signs in to the app, and a one-way hash of the computer's hardware identifier (the identifier itself is never sent; the hash lets us recognize the same computer, see "Referral program" below).
- Subscriptions and orders: plan, expiry date, order amount and time. Online payments are processed by Stripe; we receive payment details such as payment method type, card brand and last four digits, issuing country and payer email, and a card fingerprint (an identifier generated by Stripe that shows whether two payments used the same card without revealing the card number), but never your full card number. We also record the IP address from which you start a checkout.
- Profile configs synced for teams: when you use team management, profile configs (fingerprint, proxy settings, launch options) are stored on our servers so the members you authorize can open them. Cookies and login sessions are not part of team sync (see the next item).
- Encrypted cookie cloud sync (optional, off by default): if you turn it on for a profile, its cookies are uploaded as a blob encrypted on your computer with a key derived from your recovery code; we store only the ciphertext and cannot decrypt it. Turning sync off deletes the cloud copy immediately; encrypted copies in our backups are purged within 30 days.
- Activity logs: records of actions such as creating accounts, granting permissions, creating or editing profiles, exports and sign-ins, together with IP addresses, for the account owner to audit.
- Referral program (if you take part): your referral code, the accounts you referred and their payments (shown to you only with masked email addresses), video links you submit for review, and the USDT network and address you give for payouts. To prevent self-referrals, we automatically compare a referrer with the people they referred on device hash, card fingerprint, sign-up and checkout IP addresses, and payout address. A match only puts the related commission on hold for manual review; it is never deducted automatically.
3. How we use information
We use the information above only to provide and maintain the Service, verify sign-in, manage subscriptions and payments, send account-related notices (such as password resets and expiry reminders), handle support requests, prevent abuse and fraud, and meet legal obligations. We do not sell your personal information.
4. Sharing
We do not share your information with third parties except: with payment providers such as Stripe, as needed to complete payments; with the hosting and email providers we use to run the Service; and where required by law, regulation or judicial authorities.
Advertising measurement. nullprint.ai uses Google Ads conversion tracking (the Google tag) to measure sign-ups and purchases that come from our ads. It sets cookies on nullprint.ai and may pass a click identifier (such as gclid) and the fact that a sign-up or purchase happened to Google; we store that click identifier with the account it led to. We also use Google Ads to measure how well our ads work: for accounts that came from an ad, we send Google the ad click identifier (gclid), which conversion happened (such as sign-up, first desktop login, first profile created or purchase) and when, and the amount paid. We do not send your email address, name or other personal information. In the European Economic Area, the United Kingdom and Switzerland this stays off until you accept it in the consent banner, and you can change your choice from the banner at any time. It is never used to read the websites you visit inside Nullprint.
Sign-up source. To understand which of our channels bring new users, when you first visit nullprint.ai we note in your browser how you arrived: the page you landed on, the referring site (domain only), campaign parameters such as utm_source and ad click identifiers, and any invite or partner code. When you sign up (by email, with Google, or in the app), this is sent with your registration and stored with your account, together with the country derived from your IP address and your language. It is used only for our own statistics and is not shared, except for the ad click identifier and conversion events sent to Google as described under Advertising measurement above.
5. Your choices
In your account you can view account, device and order information, change your password and remove devices. To access, correct or delete your account information, contact us. You control your local data: permanently deleting a profile from the recycle bin in the app deletes that profile's data from your computer.
6. Changes to this policy
We may update this policy. The updated version will be posted on this page with an updated "Last updated" date.
7. Contact us
support@nullprint.ai · HENGCHENG LLC