PIIRUS does not sell personal information. This Policy explains what NetForge collects, how we use it, and the choices available to you.

Effective and last updated October 27, 2026. NetForge operates PIIRUS. This Policy supplements the Terms of Service and controls if the documents conflict on a privacy matter.

1. Who we are and what this Policy covers

NetForge (“NetForge,” “we,” “us,” or “our”) operates PIIRUS and the websites at piir.us, piirus.com, and related sites we control (the “Site”). This Policy applies to personal information processed through the Site, accounts, checkout, downloads, PIIRUS Windows software, and the PIIRUS browser extension (together, the “Service”).

“Personal information” means information that identifies you or could reasonably be linked to you or your household, such as your name, email address, account details, payment reference, or a device identifier associated with your account. It does not include information that has been de-identified so it can no longer reasonably be linked to you.

This Policy does not cover third-party services or websites that we do not control, including Stripe’s hosted checkout, your email provider, or Microsoft Windows. Those services have their own privacy terms.

2. How we share information

We do not sell or rent personal information. We do not disclose it to data brokers, advertising networks, social-media platforms, or other companies so they can advertise to you or build profiles about you. We do not use advertising pixels or cross-site advertising identifiers on the Site.

We do not provide customer mailing lists to SSA, other NetForge projects, The White House Facility, or organizations whose names or logos appear on the Site. Their appearance on the Site does not mean they receive account information.

We share information with service providers when needed to operate the Service, and may disclose information when required by law or valid legal process. The providers we currently use are described in Section 8. When you enable Family Alert, the Software sends the alert information you configured to the recipient you selected; see Section 6.

3. Information collected through the Site

We collect information needed to operate accounts, process purchases, manage licenses and registered devices, provide downloads, and support customers.

3.1 Account

We store your email address, any name you provide, a password hash, account status and timestamps, and email-verification status. If you enable two-factor authentication, we store its secret and recovery-code hashes. For password recovery, we store a hash of the single-use reset token, not the token itself. We use this information to authenticate and secure your account, verify your email, recover access, and provide the account dashboard.

3.2 Orders and licenses

We store order and license information such as amount, currency, payment status, payment-provider reference, number of licenses purchased, license tier, license status, and expiration date. We use it to complete purchases, provide licenses, display your account information, and resolve payment or support issues. Stripe processes card details through its checkout service; we do not store full card numbers or security codes.

3.3 Devices

When the desktop app signs in, it sends a device identifier and computer name. We associate these with your account to assign licenses, show your registered computers, and let you release a license from a device. We do not use device identifiers for advertising.

3.4 Support

If you contact us at support@piir.us, we receive the information you include, such as your email address, message, and attachments. We use it to respond and provide support.

3.5 What we do not collect

We do not ask you for Social Security numbers, government identification numbers, or dates of birth to create an account. PIIRUS does not send us your keystrokes, webcam, microphone, general clipboard stream, or complete activity history in ordinary operation. If you enable Family Alert, the event information described in Section 6 is sent to your chosen recipient. The Service does not request access to your contacts, photos, or precise GPS/device location.

3.6 Browser extension

The PIIRUS browser extension checks page hostnames locally against its bundled scam lists and look-alike rules. Its Online Reputation Check is off by default. If you turn it on, the extension sends the current page URL to our reputation service at piir.us to obtain a verdict; the service uses the hostname for the check. The extension does not send page text, images, or other page contents, and does not upload a stored list of your browsing history.

If you click “Report this site” or “This was a mistake,” the extension sends the page URL, hostname, warning reason, and report type to PIIRUS for abuse prevention and moderation. Reports are not linked to a PIIRUS account. We store the submitted report for review and blocklist maintenance, and use a truncated hash derived from the request IP to help deduplicate reports. The request IP is also used for rate limiting; short-lived rate-limit counters are routinely cleaned up. Cloudflare may process the IP address, request URL, request time, and technical request information as our hosting and security provider, as described in Section 5.

The extension downloads a signed scam-domain feed from PIIRUS. If you opt in to third-party filter-list subscriptions, it downloads filter-list data from the listed publishers; those requests do not include the page URL you are visiting. If the PIIRUS Windows app is installed and its native bridge is enabled, blocked-site details can be sent locally from the extension to that app. The extension does not send those native-messaging events directly to a server.

4. Information stored on your PC

PIIRUS performs its protection functions on your Windows device. Settings, safe-list entries, local history, PIN data, Family Alert contact settings, and similar configuration are generally stored in your Windows user profile and are not routinely uploaded to our servers.

We do not routinely receive your local history, overlay detections, or clipboard contents. If you enable Family Alert, the Software sends the alert details described in Section 6 when a configured event occurs. You control access to your Windows profile and the backups you make of data stored on your device.

Uninstalling PIIRUS does not delete your Site account or purchase records. Deleting your Windows profile does not delete your Site account. See Section 14 to request account deletion.

5. Cookies and technical information

The Site uses first-party cookies needed to maintain your sign-in session and support account security. These are not advertising cookies. We do not use third-party advertising cookies or cross-site tracking for targeted advertising. If you disable cookies, some account features may not work correctly.

Cloudflare, our hosting and security provider, may process technical information such as IP address, browser or device information, request time, and requested URL to deliver and protect the Site and maintain operational logs. Provider logging and retention are also subject to Cloudflare’s policies and service settings.

6. Family Alert

Family Alert is optional. If you enable it, PIIRUS may email the address you choose when a configured event occurs, such as a remote-access program starting or protection being turned off. An alert may include the event, computer name, name or account details you configured, optional phone number, and event details supplied by the Software.

The email is sent at your direction to the recipient you chose. We do not add that recipient to a marketing list or use the address for advertising. You are responsible for having permission to send alerts to that recipient. Email delivery can be delayed or blocked by spam filters or provider outages.

7. Payments

Payments are processed through Stripe’s hosted checkout. Payment-card details are entered with Stripe and are not stored by NetForge as full card numbers or security codes. Stripe provides information needed to complete and record an order, such as payment status, amount, currency, customer email, and a transaction reference. We store the reference to associate the payment with your account and licenses.

Stripe processes payment information under its own privacy notice and terms. We do not sell payment information or use it for advertising.

8. Service providers

We use service providers to operate the Service and perform functions such as hosting, payment processing, and email delivery:

• Cloudflare: website delivery, hosting, database, file storage, and security.
• Stripe: hosted checkout and payment processing.
• Resend: delivery of account, security, license, and Family Alert emails.

Each provider may process information as needed to provide its services and under its applicable terms and privacy notice. We do not use these providers to advertise to you. Organizations identified as partners or supporters on the Site do not receive account information merely because they are listed there.

9. Legal requests and safety

We may disclose information when required by applicable law or valid legal process. Where permitted, we will limit a response to the information the request requires and may notify you. We may also disclose information when reasonably necessary to protect a person from imminent serious harm or to protect the rights, security, or integrity of the Service.

10. How we use information

We use personal information to create and secure accounts; verify email addresses; process and record payments; grant and manage licenses; provide downloads; send requested operational and security messages; respond to support requests; protect against abuse and fraud; and comply with legal obligations. We do not use account information for targeted advertising or combine it with purchased broker data to build advertising profiles.

11. Retention

We retain account, order, and license records while needed to provide the Service and afterward for legitimate business and legal purposes, such as accounting, tax compliance, payment disputes, fraud prevention, and enforcing our agreements. Password-recovery tokens and email-verification codes expire and are single-use where applicable. Device records are retained as needed to manage license assignments and account history. Technical and email logs are retained according to operational needs and provider settings. When information is no longer needed, we delete it or de-identify it where reasonably practicable. Copies may remain in backups until those backups expire under the applicable backup cycle.

12. Security

We use administrative and technical safeguards designed to protect account information, including password hashing, signed session tokens, secure cookie attributes, and license checks. No method of transmission or storage is completely secure. You are responsible for protecting your password, email account, and devices. Contact support@piir.us if you believe someone accessed your account without permission.

13. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact support@piir.us so we can review and address the request. A parent or guardian who installs PIIRUS on a family computer remains responsible for the account and device.

14. Your choices and privacy rights

You can update account details and manage registered devices through the Site where those controls are available. You may request access to, correction of, or deletion of personal information associated with your account by emailing support@piir.us from your account email address. We may ask for information needed to verify your identity and understand your request.

We will delete or de-identify information we no longer need, subject to records we must retain for legal, accounting, security, or payment-dispute purposes. Deleting your account ends its associated licenses; uninstall PIIRUS from your devices separately.

Depending on where you live, you may have additional privacy rights, such as the right to access, correct, delete, or obtain a copy of certain information, or to appeal a decision about a request. Contact us to exercise a right that applies to you. We do not sell or share personal information for cross-context behavioral advertising.

If an authorized agent submits a request, we may ask for proof of authorization or ask you to confirm the request through your account email.

15. International processing

NetForge operates from the United States. Your information may be processed in the United States and in other locations where our service providers operate. Privacy protections in those locations may differ from those in your jurisdiction.

16. Automated processing

The Service uses automated checks to authenticate sign-ins, manage licenses, and associate devices with accounts. These checks support operation and security; they are not used to create advertising profiles or consumer-credit scores. Contact us if you believe a license or device decision is incorrect.

17. Changes to this Policy

We may update this Policy by posting a revised version on the Site and changing the “Last updated” date. If a change materially affects how we collect or use personal information, we will provide notice where required by law. The revised Policy applies from its stated effective date. If you do not agree, stop using the Service and contact us about closing your account.

18. Contact

For privacy questions, requests, or concerns about account security, contact NetForge at support@piir.us.

© 2026 NetForge. All rights reserved.