QPad
Privacy Policy
Last updated November 1, 2026
1. Who is responsible
Sandberg Software AS (org. no. 920 612 261), Mattis Skyttersvei 183, 1482 Nittedal, Norway, is the data controller for the personal data described here. Contact us at stian@sandbergsoftware.no about anything in this policy.
2. What we store, and why
| Data | Purpose | Legal basis |
|---|---|---|
| Name, e-mail address, password (stored only as a secure hash) | Your account and signing in | Contract |
| The version of the terms you accepted, and when | Documenting the agreement | Contract |
| License: edition, key, status and dates | Providing the license | Contract |
| Educational: school, country, role, study program or subject, expected end | Checking that the license is used by students and teachers | Contract |
| Devices: an anonymous machine ID (a hash, not the ID itself), the computer name, Windows and QPad versions, when activated and last used | The limit of 3 devices, and letting you recognize your devices on the account page | Contract |
| The anonymous machine ID of devices that have used a Free trial, and when | Preventing repeated trials | Legitimate interest |
| IP address and time of requests, in security logs and rate limiting | Security and preventing misuse | Legitimate interest |
| Error reports from the app: error message, stack trace, the code you ran, run mode, packages, database type, QPad, .NET and Windows versions | Fixing errors in QPad | Consent (you are asked in the app, and can turn it off under Settings) |
| Feature requests: your text and which license sent it | Developing QPad, and contacting you if something is unclear | Contract |
| Visits to qpad.no, counted without cookies and without storing IP addresses (Umami, on our own server) | Statistics about the website | Legitimate interest |
Error reports never contain passwords, connection strings, or names of servers, databases, connections or files, and your user folder is masked. We do not sell personal data, and we do not use it for advertising.
3. Cookies
qpad.no only uses cookies that are needed for the site to work:
QPad.Authkeeps you signed in (up to 14 days).- An antiforgery cookie protects the forms.
QPad.Languageremembers the language you chose (one year).
There are no tracking or advertising cookies.
4. How long we keep it
| Data | Kept |
|---|---|
| Account, license and accepted terms | Until you delete the account (accounting records if you pay, as required by the Norwegian Bookkeeping Act) |
| Educational details | 12 months after the Educational license ends, or until you delete the account |
| Devices | 90 days after the device is removed, or until you delete the account |
| Machine IDs of Free trials | 24 months |
| Security logs | 30 days |
| Error reports | 180 days |
| Feature requests | Until you delete the account |
5. Who else processes it
- Brevo (Sendinblue SAS, France) sends our e-mails, such as confirmation and password reset.
- If we start selling licenses, the payment provider will process the payment details. This policy will be updated before that happens.
The rest is stored on servers operated by Sandberg Software AS. We do not transfer personal data outside the EU/EEA.
6. Your rights
You have the right to access, correct and delete your personal data, to restrict or object to its processing, to data portability, and to withdraw consent at any time. You can change your name and delete your account on your account page; for anything else, write to us. You can also complain to the Norwegian Data Protection Authority (Datatilsynet).
7. Security
Passwords are stored only as secure hashes, all traffic uses HTTPS, and the machine ID is hashed before it leaves your machine. In the app, passwords for your databases and package sources are encrypted for your Windows account and are never sent to us.
8. Changes
If we change this policy, we update the date at the top. Significant changes are announced by e-mail or on qpad.no.