recovery privacy.

Effective October 26, 2026

I’m Owen Van Vooren, an individual developer in Minnesota, United States. Contact hi@trysmush.app about smush, recovery or your information.

This service recovers existing smush license keys. It does not enable public purchasing or paid activation.

what is processed

The service checks the email you submit against purchase records in Cloudflare D1. Responses do not reveal whether an email owns a license. Matching paid records produce a random, one-use recovery code with a 15-minute expiry. Code hashes, license references and expiry/use times are stored; email drafts and delivery requests are encrypted at rest.

Resend receives the destination address, sender/reply address, message text and the license key or recovery code needed for delivery. Its delivery events provide message IDs and delivery/failure status. Open and click tracking are disabled. The app’s cursor activity is not sent to this service or Resend. See Resend’s privacy policy.

security and retention

HTTPS protects transport. Keys and codes are not put in URLs, and private responses are not cached. Keyed IP/email hashes rate-limit requests; counters become eligible for removal after one day. Expired recovery-code records become eligible for removal one day after expiry. Terminal email records retain their message contents for up to 30 days before scheduled removal of those contents; non-secret identifiers remain to prevent duplicate sending. Unresolved failed/uncertain sends remain available for support review. Scheduled jobs can run after the eligibility time.

Underlying license/purchase records remain while needed to provide the license, recovery, support and applicable legal obligations. Resend and Cloudflare can retain their own operational/recovery copies under their policies. Providers may process data outside your country. No system guarantees perfect security.

your choices

You can ignore an unrequested recovery email, avoid submitting this form, or contact me for access, correction, deletion or help. I may proportionately verify your identity. Deletion can affect later recovery; I will explain that before removing needed license information. For the broader site/app practices and rights information, read the main privacy notice.