Skip to content
Fanio
AR, العربية

Your privacy

We keep only what a purchase needs, and nothing to sell.

  • Only what we needYour email and your order.
  • No ads or trackingWe never sell your data or train AI on it.
  • Necessary cookies onlyNo analytics or advertising cookies.
  • Your data, your callAsk for a copy or deletion at any time.

The full text

Version of 24 October 2026, in force from that day. What Fanio collects, why, where it is kept and for how long. Published in Arabic and English, and both texts are equally authoritative.

Who is responsible

Fanio's owner, an individual resident in the Syrian Arab Republic (section 1 of the terms), is responsible for your data. We follow the Syrian law on the protection of electronic personal data (Law No. 12 of 2024) and, for people in the European Union and the United Kingdom, the GDPR and the UK GDPR. Contact for anything about your data: support@fanio.net, or the owner at m@muhmad.me. Fanio offers its service to buyers in the European Union and the United Kingdom without an establishment there; where the GDPR requires a representative there, we will name one here.

What we collect and why

  • When you buy: your email address and the order (pack or plan, licence tier, price, time, status and any coupon), to deliver the files, prove your licence and issue receipts. If you use a coupon, we also keep a one-way hash of your network address to enforce the coupon's limits. Legal basis: the contract with you.
  • When you pay: the wallet address you pay from, the amount and the transaction hash, to match and prove the payment and to screen it against sanctions lists. Blockchain records are public and permanent: we can delete them from our own records, never from the network. Legal basis: the contract, and our legal duty to respect sanctions.
  • A one-way hash of your licence key and of your order's access code, plus the first characters of the key so you can recognise it. We never keep the full key. Download links are signed and not stored. Each paid download is recorded (licence, scene and time), and the file carries a mark unique to your licence, so a copy published without permission can be traced. Legal basis: the contract, and our legitimate interest in protecting our work.
  • When you sign in: your email address, your account ID, your plan and its end date, and your sign-in times, to sign you in, keep your plan running and show your orders on any device. Legal basis: the contract.
  • When you write to us: your message and our reply, to answer you. Legal basis: our legitimate interest in answering, or the contract when it is about an order.
  • For security: your network address, a one-way hash of your email address and short usage counts, used to limit abuse and fraud. The sign-in page also uses Cloudflare Turnstile, which reads your network address and browser signals to tell people from bots. Legal basis: our legitimate interest in keeping the service safe.
  • Saved scenes stay in your browser's local storage and are never sent to Fanio.

We do not use your data for any decision made only by a machine that has legal or similar effects on you, and we do not collect sensitive data such as health, religion or political opinion.

How long we keep it

  • Orders, payments, receipts, plans and the audit records linked to them: for as long as the licence or plan they prove lasts, which for a perpetual licence means they are kept, so you can always prove your licence and download again.
  • Your account: until you delete it.
  • Messages to support: up to 2 years after the last reply, unless they concern an order.
  • Usage counts: about one day.
  • Backups of the database: replaced by newer ones on a rolling basis, so a deleted record leaves them as they are replaced.

Where it is kept and who processes it for us

  • The database (orders, licences, accounts and sign-in) runs on a server in Germany, rented by Fanio's owner from Hostinger and managed by the owner. Encrypted backups are kept in Cloudflare R2.
  • Cloudflare: hosting, file storage and bot protection, worldwide. For Turnstile, Cloudflare also acts on its own account to improve bot detection.
  • Zoho (ZeptoMail and Zoho Mail, data centre in the European Union): emails with sign-in codes and receipts, and the support mailbox.
  • Nabta: payments. Nabta is run by Fanio's owner, so the owner, not a separate company, holds this data; it records your paying address and transaction, never a card.

Each of the other providers works only on our instructions, under its data processing terms. Your data leaves the country you live in, as any online purchase does: Syria has no adequacy decision from the European Union or the United Kingdom, so transfers from there rely on the processors' standard contractual clauses where the law requires them, and on the contract with you. The owner reads the data from Syria only to run the service and answer you.

How we protect it

Connections are encrypted, database backups are encrypted, sign-in uses one-time codes instead of passwords, licence keys are stored only as hashes, and only the owner can sign in to the database and the admin tools. If a breach puts your data at risk, we will tell you and the authorities the law names without undue delay, and for the European Union and the United Kingdom within the deadlines the GDPR sets.

Cookies

These cookies are strictly necessary, so there is no consent banner. Fanio sets no analytics, advertising or tracking cookies. On the live site the sign-in cookie names start with __Host-.

  • fanio_orders: lists the orders bought in this browser so it can show them. 30 days.
  • sb-fanio-auth-token: keeps you signed in, sometimes split into numbered parts. Until you sign out, at most about 400 days.
  • sb-fanio-auth-token-code-verifier and related code-verifier cookies: check that a sign-in code belongs to this browser. Set when you ask for a code; at most about 400 days unless cleared.
  • fanio_signin: holds a sign-in in progress. 10 minutes.
  • fanio_locale: your choice of Arabic or English, set only when you use the language switch. 1 year.

Your choice of light or dark theme stays in your browser's local storage. Cloudflare may also set its own short-lived security cookie to filter automated traffic.

What we never do

We do not sell or rent your data, show advertising, track you across other sites, or use your data to train artificial intelligence.

Your rights

You may ask for a copy of your data, its correction or deletion, or for us to limit or stop using it, and for a copy in a portable format. You may also object to any use based on our legitimate interest. Write to support@fanio.net from the email the data belongs to; we answer within 30 days, free of charge. Records we must keep to prove a licence or a payment, or that a law requires, are kept for that period and used for nothing else. You may also complain to the Syrian authority responsible for personal data protection, or to the data protection authority of your country in the European Union or the United Kingdom.

Children

Fanio is not meant for children under 16, and we do not knowingly collect their data. If you believe a child has given us data, write to us and we will delete it.

Changes

We will publish any change to this policy here with its date, and tell account holders by email before a change that reduces their rights takes effect.