Privacy Policy

1. Who We Are

Pingr is made by twoplus11 LLC, a Missouri limited liability company (twoplus11.com). When this policy says "we," "us," or "our," it means twoplus11 LLC.

Questions about this policy? Email us at jeremy@twoplus11.com.

2. What Pingr Sees, and Why It Stays on This PC

Pingr's entire purpose is to keep a record of what Windows told you, including notifications you'd normally lose the moment you dismiss them. Being precise about that is more important here than in most privacy policies, so:

• Pingr does read the content of your notifications. To archive and search them, it necessarily sees each notification's sending app, title, message text, and timestamp and, because that is the headline feature, it looks for one-time codes inside that text. This is not a side effect; it is what you are installing the app to do.
• None of it leaves your PC. Every notification Pingr captures is written to its own database, on your own disk, and stays there. Nothing you've received (and nothing Pingr detects inside it, including a one-time code) is ever uploaded to us or to anyone else. There is no sync and no server in the capture or search path.
• Windows grants the access, not us. Pingr asks Windows for permission to read notifications through Windows.UI.Notifications.Management.UserNotificationListener, a real, consented OS API, and Windows shows its own system prompt. That exchange is between you and Windows; twoplus11 is never a party to it and never sees whether, or when, you granted it.
• What Pingr stores on your PC. Its archive (the app, title, subtitle, body and timestamp of each captured notification, plus a detected one-time code where one exists) lives in %LOCALAPPDATA%\Pingr\archive.sqlite3. Preferences (language, theme, retention choice) live separately in %APPDATA%\Pingr\prefs.json. The archive is deliberately kept out of the roaming profile: on a domain-joined machine, anything in %APPDATA% can be copied to a file server at logon and logoff, and an archive of one-time codes has no business making that trip.
• The archive is not encrypted. It is a plain SQLite file. Windows restricts it to your own user account with a real access-control list (this stops another standard user on the same PC from reading it), but it cannot and does not stop a local administrator, who can always take ownership of a file on their own machine. Choose a retention period and app exclusions that fit what you're comfortable this file holding.
• Retention is yours to set, from one week to forever (default 90 days), pruned automatically. Deleting a notification, excluding an app, or letting retention prune a row is a real deletion (the underlying database page is overwritten, not just unlinked), not a soft hide.
• Excluding an app deletes what Pingr already holds from it, not just what arrives afterward.
• Optional code redaction can blank the detected one-time code on older rows while keeping the notification text; it is off by default. Even when it's on, it removes the indexed code field only: if the code also appears written out in the message body ("Your code is 481920"), that text is untouched, because rewriting it would corrupt the record.
• No usage analytics. The app does not report what notifications you get, what you search for, or what you do inside it.
• No accounts for personal use. Personal use needs no sign-up and no key. (Commercial-license activation is the one exception; see the next section.)

3. Data We Do Collect

Commercial-license purchases. If you buy a Commercial License, you enter your company name, work email, and number of devices in our checkout form. We receive your company name and email so we can deliver your license key and keep a record of the purchase. Payment is processed by Stripe. Your card details go straight to Stripe, and we never see or store them.

License activation. When you activate a commercial license key in Pingr, the app sends the license key, a one-way hash of a Windows machine identifier (a truncated hash that cannot be reversed back into the identifier), and the device name you choose to show, to our licensing server so it can verify the license and let you tell your own devices apart when managing seats. This exchange never includes anything about your notifications, their content, or your files. These requests are hosted on Microsoft Azure, which may keep standard server access logs (such as IP address) for security and operational purposes. Pingr only makes this request once you enter a commercial key. Personal use never touches it.

Update checks. Pingr checks whether a newer version exists: periodically in the background (you can turn this off in Settings), or when you check manually. This is an ordinary request to twoplus11's update service naming the app and the version you're running; like any web request, it also carries your IP address. We record that the check happened, with a one-way daily hash of that address rather than the address itself, together with the browser-style identifier your PC sends with any web request, so we can count how many installs are active. It carries no notification content and no persistent identifier tied to you. If you choose to install an update, Pingr downloads the installer from twoplus11.com and verifies its digital signature and version before running it.

4. Where Pingr Stores Things on Your PC

Everything Pingr saves stays inside your own Windows user account, and none of it is transmitted:

• Your notification archive (the actual content this policy is about) in %LOCALAPPDATA%\Pingr\archive.sqlite3, access-restricted to your Windows account.
• Preferences (language, theme, retention choice, and your commercial license key and its cached validation result, if you have one) in %APPDATA%\Pingr\prefs.json and your user profile. The license cache exists so the app keeps working for a period without a network connection.
• The application itself in %LOCALAPPDATA%\Programs\Pingr, or in C:\Program Files\Pingr if you chose to install it for everyone who uses the PC.

Uninstalling removes the application but deliberately leaves your archive and preferences in place: a product whose purpose is keeping a record should not silently delete that record when you remove the program. Use Clear all history in Settings, or delete the folders above yourself, if you want every trace gone.

5. If You Contact Us

If you email us (for support, beta feedback, or a question about your commercial license), we receive your email address and whatever you choose to put in your message. If you submit our report form and attach a screenshot, we receive that too. We use this information only to reply to you and to fix the problem. We do not sell or share it. Please don't include a real one-time code or other sensitive notification content in a bug report. Describe it, or redact it, rather than pasting it in.

6. Downloading the App

Pingr is downloaded from our website, which is hosted by a third-party web host. Like any website, the host may keep standard server access logs (such as IP address) for security and operational purposes. This happens at the web-server level when you visit the download page. The Pingr application itself does not transmit anything at download time.

7. Children's Privacy

Pingr is not directed at children under 13, and we do not knowingly collect personal information from children under 13.

8. Your Rights

If you are in the European Union, United Kingdom, or California, you may have the right to access, correct, or delete personal data we hold about you. The only personal data we hold is what you send us by email and, for commercial-license holders, the company name and email tied to your purchase. Your notification archive lives only on your own PC and we never receive a copy of it. You can exercise these rights by contacting jeremy@twoplus11.com. We will respond within 30 days. Deleting your commercial-license record will deactivate the license.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Effective date" at the top of this page when we do. We encourage you to review this page periodically.

10. Contact

Questions or concerns about this Privacy Policy? Contact us at:

twoplus11 LLC
jeremy@twoplus11.com