Legal

Privacy Policy

Last updated: 25 October 2026

This policy explains what information UMA Tool processes and why. We keep data collection to the minimum needed to run the service.

Who we are

UMA Tool (bit-fix.net) operates the software and server. For any privacy request, contact us on WhatsApp.

What we process

• Account details: your name and email from Google or from the email you sign in with.
• Browser identifier and device fingerprint (web): a random ID stored in your browser (cookie, local storage) and a hash of technical traits of your device (graphics card, screen, fonts, time zone, language). Collected at sign-in and on every processing request, together with your IP address.
• Device fingerprint (HWID, desktop app): a hardware identifier used to lock your license to your computer and to approve your device.
• License information: your plan, activation status and processing counts.
• Files you submit: the reads and dumps you upload, processed to generate your result.
• Basic technical logs: request and job records (such as time, function used and device) needed to run the service and prevent abuse.
• Contact details you choose to share: for example the WhatsApp number you message us from.

Why we process it

• To activate and bind your license and approve your device.
• To provide the processing service and return your result.
• To protect the service against sharing, fraud and abuse (legitimate interest): one free trial per person, one browser per account at a time, and one account per connection at a time. If an account is open in two browsers at once, processing pauses until only one is left; repeated sharing locks the account.
• To provide support.

Cookies and browser storage

The web app uses only what it needs to work. There are no advertising or third-party tracking cookies. You must accept these to sign in and use the web app. If you decline, you can still read the public pages.

• bf_consent (cookie, 1 year): remembers that you accepted cookies.
• bf_session (cookie, 30 days): keeps you signed in.
• bf_oauth (cookie, 10 minutes): protects the Google sign-in step.
• bf_bid (cookie, local storage and IndexedDB, about 13 months): the random browser identifier described above, used to protect your account and the free trial from abuse.
• bf-theme (local storage): your light/dark theme choice.

We also record when you accept the cookies and the in-app disclaimer (date, IP address, version), as proof of acceptance. These records are deleted with your account.

Files you submit

Uploaded files are used only to produce your result and for troubleshooting if needed. We do not sell them and do not share them with third parties for their own use. Please keep your own backup of every original file.

Sharing

We do not sell personal data. We only use the infrastructure needed to run the service, such as secure hosting and network protection. We may disclose information where required by law.

Retention

We keep license and technical records for as long as needed to provide the service, enforce our terms and meet legal obligations.

When you delete your account, your name, email, sign-in and browser data are erased. We keep only one-way keyed hashes of your email, IP address and browser identifiers, so the same person cannot claim a second free trial. These hashes cannot be turned back into your data.

Security

Connections are encrypted and license keys are bound to your device. No system is perfectly secure, but we take reasonable measures to protect your data.

Your rights

Depending on where you live, you may have the right to access, correct or delete your personal data, or to object to certain processing. You can delete your web account yourself at any time: account menu → Delete account. For any other request, contact us on WhatsApp.

Changes

We may update this policy; the "last updated" date above shows the latest version.