Privacy

Last updated 19 October 2026

HAND-E is made by Bulut Solutions LLC, a company in New Jersey, USA ("we"). This page lists everything the HAND-E device and this website send to us or to other companies, what we keep, and for how long. We do not sell data, show ads or use tracking.

This website

• No tracking cookies, no analytics, no trackers, and nothing loaded from other companies' servers. The only cookie is the one described under Buying a license, set right after a purchase.
• The device on the home page runs in your browser. The earthquake and satellite data it shows comes through this website from public sources (the USGS and NOAA); we do not record who views it.
• Our hosting provider, Cloudflare, processes your IP address to deliver the pages and protect against attacks.

Buying a license

Licenses are sold through Polar, our merchant of record. Polar processes your payment details, your email address and the billing details needed for tax, under Polar's privacy policy. Your card details never reach us. Polar emails you a link to your license key and keeps the key in its customer portal. We can see your order in Polar's dashboard (your email address, what you bought and when) to answer questions, handle refunds and move a license to a new board.

Right after you pay, our server sets one short-lived, strictly necessary cookie (__Host-hande-buy, about 2 hours) so that only the browser that opened the thanks page can see your key there. It holds a random value, nothing about you, and is not used for tracking.

Activating a device

When you activate HAND-E, we store your license code (as a one-way fingerprint), the Board ID it is linked to, and when it was activated. For a key bought through Polar, our server first asks Polar's API whether the key is valid, then stores only the one-way fingerprint of the key, Polar's identifier for the key and Polar's identifier for your customer account (not the key itself, not your name and not your email address). If the purchase is refunded or charged back, or the key is revoked, Polar tells our server, and we mark that license as revoked. To process these messages once and to finish a refund whose key Polar has not listed yet, our server keeps each message's identifier and type, and the Polar order and customer identifiers of a pending refund. The Board ID is derived from the device's hardware network address. Your IP address is used only to limit repeated attempts: it is held in memory for a few minutes, and written to the server log only when an address goes over the limit.

The device

• HAND-E itself checks its license and looks for apps and updates from time to time. These requests carry the Board ID, the license record and the software versions installed. We do not store them.
• GeoQuake sends a device identifier (the device's hardware network address) and the app version with its data requests. For each device we keep the identifier, the IP address it last used, the name of its software, its app version and when it was last seen. We use this to run the service and to see how many devices are in use.
• GeoMap sends the same kind of identifier and its app version. For each device we keep the identifier, the app version, when it was first and last seen, how many requests it made, and the approximate location Cloudflare reports for its network (country, region, city and time zone). We do not keep its IP address.
• Framini asks our servers for updates and for its video catalog, sending its app version. We do not store anything about the device.
• MemoFrame sends nothing to the internet. Its web page runs on the device on your own network.
• MemoFrame and Framini keep your cards, photos and videos on the device and its memory card. They are never sent to us.
• DeskBuddy asks two public time services, ip-api.com and worldtimeapi.org, for your time zone, which they work out from your IP address. These requests are not encrypted. Its optional remote features are switched off in the current version.
• To set their clocks, GeoQuake, GeoMap, Framini and DeskBuddy ask public time servers (pool.ntp.org, time.nist.gov or time.google.com). These servers see your IP address.

Your Wi-Fi password stays on the device. It is never sent to us.

Where it is kept

License records are stored on a server rented from Hetzner in Germany. Device records are stored by Cloudflare. Our backups are kept on our own server and in Cloudflare's storage. If you email us, your message is delivered through Cloudflare and Google (Gmail).

How long we keep it

• License records are kept for as long as the license exists. A revoked license is kept so that its key can never be activated again. Records of Polar's messages and refunds are kept with the license records. Backups of them are kept for up to six months.
• Device records from GeoQuake and GeoMap are kept until you ask us to delete them. We do not delete them automatically yet.
• Server logs are kept for a short time to run and protect the service.
• Emails are kept for as long as needed to answer you.

Your choices

You can ask us what we hold about your device, or ask us to delete it, by writing to hello@handeos.com with your Board ID. We can remove the link between a license and your Board ID; the device then has to be activated again. We keep the license itself (the key's fingerprint and Polar's identifiers, not your name or email) so a refunded or revoked key cannot be used again, and to show a valid license was bought.

Changes

If this changes, we update this page and the date at the top.