Privacy policy

Haul is made by Ishan Chanuka Kodippiliarachchi, an individual developer in Sri Lanka ("we", "us"). This policy explains what the Haul app, its online services and this website collect, why, and what you can do about it. Questions: support@hauldownload.com.

The short version

• Haul Free needs no account and sends us nothing. Your downloads go straight from the sites you use to your PC; we never see what you download.
• An account is only needed for paid plans and the phone remote. It holds your email address, the names of your PCs and phones, and your licences.
• Payments are handled by Paddle. We never see your card details.
• This website uses no cookies and no analytics.

The app on your PC

Haul keeps its downloads, settings and history on your PC. It contacts other services only in these cases:

• Downloads: Haul connects to the sites and mirrors of the files you download, as your browser would.
• Updates: Haul checks GitHub for a newer version every few hours. GitHub sees your IP address, as it does for any visit.
• ffmpeg: only if you ask Haul to download it, Haul fetches it from the FFmpeg-Builds project on GitHub.
• Crash reports: off unless you turn them on in Settings. When on, a report of a crash is sent to our server with web addresses, file paths, email addresses and ids removed first. Reports carry nothing that identifies you or your PC, and are deleted after 90 days.

Your account

When you sign in (from the app, with an emailed link or with Google), our server stores:

• your email address (from Google, only your email address);
• each signed-in PC and phone: the name you gave it, a public key, when it was added and last seen;
• your licences: what you bought, when, its renewal or end date, and which PCs use it;
• for phones you pair: a push notification token, so we can tell your phone a download finished.

Messages between your phone and your PC are end-to-end encrypted: our server passes them along and can't read them. It keeps undelivered messages for at most 24 hours. Push notifications go through Expo's service and carry only a short, content-free note such as "A download finished".

Sign-in emails are sent with Microsoft Azure Communication Services. Our server runs on Microsoft Azure and stores its data with Supabase.

Payments

Paddle (Paddle.com Market Ltd) is our reseller and the merchant of record for every order. Paddle collects your payment details, address and tax information under its own privacy policy. We receive from Paddle what we need to give you your licence: your email address, what you bought, the price and currency, your country, and the status of your subscription.

This website

This website is hosted by Vercel, which keeps short-lived server logs (such as IP addresses) to run and protect the service. We set no cookies and use no analytics or advertising tools. The download page asks GitHub's API for the newest release from your browser.

Why we use your data

To provide what you asked for: signing you in, your licences, the phone remote and support (performing our contract with you); crash reports only with your consent; and keeping the service secure (our legitimate interest). We don't sell your data, and we don't use it for advertising.

How long we keep it

Account data stays while you have an account. Purchase records are kept as long as tax and accounting rules require. Sign-in links and pairing codes expire within minutes; crash reports after 90 days.

Your choices and rights

You can sign out of Haul at any time and keep using Free. You can ask us for a copy of your data, to correct it, or to delete your account by writing to support@hauldownload.com. Depending on where you live you may have further rights, including complaining to your data protection authority.

Children

Haul isn't directed at children under 13, and we don't knowingly collect their data.

Changes

If this policy changes, we'll update the date above, and tell account holders by email about changes that matter. See also our terms.