Fixture

Legal

Privacy Policy

Last updated: August 29, 2026

Who We Are

Fixture Dev, LLC ("Fixture", "we", "our", or "us") is a small software company that builds developer tools. This Privacy Policy explains what information we collect through fixture.dev and our tools, why we collect it, and what we do with it.

The short version: we collect as little as we can get away with, we use cookieless analytics that can't identify you, and we never sell your data.

Information We Collect

Mailing list

If you subscribe to our mailing list, we store your email address and the consent record around it: when you subscribed, where the form was, when you confirmed, and when you unsubscribed. Subscribing is double opt-in, so we only send list mail to an address after its owner clicks the confirmation link we email them.

Evaluation requests

If you request a free evaluation of one of our products (such as the 14-day Flawd evaluation), we collect:

Evaluation activations

When you activate an evaluation license from one of our tools, the tool sends us your evaluation key and a machine instance identifier. We use these to enforce activation limits and to issue a signed entitlement back to the tool. The instance identifier is an opaque value; it does not include the contents of your files, your code, or other data from your machine.

Purchases

When you buy a license, Stripe is the merchant of record and handles the payment itself. Stripe passes us your email address, your name, and the order details, and we keep those together with the license we issue to you. We never receive your card number.

Support requests

If you contact support, the message and the address you send it from go to our help desk (Zendesk) so we can answer you.

Website analytics

We use Plausible Analytics, a privacy-friendly analytics service, to understand aggregate website traffic (which pages are visited, roughly where visitors come from, and what kind of device and browser they use). Plausible does not use cookies, does not store IP addresses or any other personal information, and does not track you across other websites. All analytics data is aggregate and anonymous; see Plausible's data policy for details. One detail worth knowing: the analytics script and its events are served through fixture.dev itself rather than from Plausible's domain, so it is our server that relays your IP address and browser type to Plausible. Plausible uses them to count the visit and does not store them.

Server logs

Like nearly every website, our servers keep standard request logs (IP address, user agent, requested page, timestamp). We use them for security, abuse prevention, rate limiting, and debugging, and we retain them only as long as needed for those purposes.

What We Don't Do

How We Use Your Information

Our Legal Bases

For readers in places with GDPR-style laws, here is the legal basis for each of those uses:

Service Providers

We use a small number of third-party services to run our business. Each receives only what it needs to do its job:

Data Retention

We keep mailing-list addresses until you unsubscribe or ask us to delete them. Our stored copies of email we have sent, evaluation keys included, are deleted 30 days after sending. Payment notifications from Stripe that carry your name and email are cleared after 12 months; the order and license record itself stays, because it is the proof of what you bought. Free-text notes on an evaluation are cleared 12 months after it expires, and the evaluation record itself (the address and its dates) stays so the one-evaluation-per-address limit keeps working. Server logs are retained briefly and then discarded.

Your Rights and Choices

Every mailing-list email we send includes an unsubscribe link. You can also ask us at any time to access, correct, delete, or export the personal information we hold about you, or to object to or restrict our use of it. Email us at the address below and we'll take care of it. Depending on where you live, these rights may also be guaranteed to you by law (such as the GDPR or the California Consumer Privacy Act); we honor such requests regardless of where you live.

If you are in the EU, the EEA, or the UK, you also have the right to lodge a complaint with your data protection authority. We'd appreciate the chance to sort it out first, but that right is yours either way.

Data Security

All traffic to fixture.dev is encrypted with TLS, evaluation entitlements are cryptographically signed, and access to production systems is restricted. No system is perfectly secure, but we keep our footprint small on purpose: data we don't collect can't leak.

Children's Privacy

Our services are for developers and are not directed to children under 13. We do not knowingly collect personal information from children under 13; if we learn we have, we will delete it.

International Users

Our services are hosted in the United States. If you use them from elsewhere, your information will be transferred to, stored, and processed in the United States. The providers listed above offer data processing agreements with EU-approved transfer safeguards (standard contractual clauses or Data Privacy Framework certification).

Changes to This Policy

If we change this policy, we will post the new version here and update the "Last updated" date. For material changes, we will also notify the mailing list.

Contact Us

Questions about this policy or your data? We're a small team and we actually read this inbox:

Fixture Dev, LLC
Email: [email protected]