Effective 21 July 2026

Privacy Policy

EmberBOM is operated by Han Wu, an individual software developer based in China. This policy explains the limited information involved when you visit the website, contact EmberBOM, evaluate the software, or purchase through Paddle.

Local software operation

The EmberBOM CLI runs locally. It has no automatic telemetry and does not automatically upload source code, file contents, filenames, paths, hashes, build evidence, SBOMs, reports, or review files. Outputs are written only to the directory selected by the user.

Website

EmberBOM records aggregate download request counts by date and operating system. No advertising pixels, third-party behavioral analytics, accounts, or marketing cookies are used. EmberBOM does not store names, email addresses, full IP addresses, cookies, device fingerprints, source code, or project contents for this measurement. Cloudflare may independently process ordinary network and security metadata under its own terms.

Contact messages

If you email EmberBOM, the message address, content, and delivery metadata are processed to respond and maintain a record of the request. Do not attach or paste project material, source code, logs, SBOMs, reports, paths, filenames, or hashes.

Purchases

Paddle is the Merchant of Record and independently processes checkout, billing, tax, fraud, receipts, and refund information under its own privacy terms. EmberBOM may receive transaction and customer details needed to identify the licensed organization, fulfill the order, prevent abuse, and handle a refund. EmberBOM does not receive payment-card details.

Retention and disclosure

Contact and transaction records are retained only as reasonably necessary for fulfillment, accounting, fraud prevention, disputes, and legal obligations. Information is not sold. It may be disclosed where required by law or to service providers needed to operate the website, email, and transaction workflow.

Your request

Privacy questions or requests may be sent to support@emberbom.com. Identity verification may be required before changing or deleting transaction-related information.