What We Hold About a License

Export Your Data on a server’s License page downloads everything the licensing service holds about the license that server holds, as a single JSON file. It holds the records we keep about that license, and the rest of this page lists what’s left out and why.

Note

The License page sits under Admin Settings, so only administrators reach it. The server needs to reach the internet while it downloads.

---

Downloading It

Export Your Data sits in the Your Data section at the bottom of System > License, with a link to this site’s privacy policy beside it, whenever the server holds its license: a paid license, a trial, or one whose term has ended. A server the license has moved away from no longer holds it, so it can’t download it. Download it from the server the license is on now.

The file is called sovereign-license-data-<date>.json. Each download is recorded as having happened, in a record that names no license, server or person.

You don’t need to have paid for the license, or to know the email address it was bought with. Whoever runs the server holding a license can already manage it, and reading what’s held about it is no different.

---

What’s in the File

The file has three parts: exportedAt, when it was made; tables, the records themselves, exactly as they’re stored; and notes, the list of what’s left out, with a link back to this page.

Section	What it holds	How long it’s kept
license	The license: its ID, plan, what it includes, its term, and the payment processor’s customer and subscription it belongs to, if it was bought	Until two years after it ends
install_bind	Every server the license has been on, by install ID, with when, the Sovereign version each one ran, and the country each request came from	With the license; the country for 90 days
license_event	Moves the license refused, and any change our staff made to it, with who and why	With the license
purchase	The checkout that bought the license	About a day after payment
install_session	The random values this server’s runs generated, with when each was first and last seen	30 days after it was last seen
install_checkin	The last day this server was counted	90 days

A trial has no customer, and a new purchase’s record may already have gone, so some sections can be empty.

---

What Isn’t in It

The download covers one license, which isn’t always the same as one customer. A customer can own several licenses on several servers, and whoever runs one of those servers shouldn’t see the others. So it leaves out:

• The customer record and recovery-email counts - these belong to whoever pays for the license, who may hold other licenses. The license itself includes the customer’s ID at the payment processor.
• Recovery emails - the emails sent when someone uses Move a License Here. Each record says whether the address that was typed belonged to a customer and how many licenses it had. That’s about whoever owns the address, not about this license, and including it would let anyone with a server find out whether an address belongs to a customer by typing it in. They’re kept for 90 days.
• Requests to move a license by email - for the same reason. They last 15 minutes.
• Other servers’ records - every server the license has been on is listed, but only this server’s own runs and check-in are included.
• The payment processor’s records - invoices, the card on file, and the email address and name the license was bought with are held by our payment processor, not by us. Manage Billing opens them.
• The trial marker - when a trial’s records are deleted, a form of its install ID that can’t be turned back into it is kept, so the server can’t start a second trial. It names nothing.
• The refund marker - when a server is refunded from its License page, the same kind of form of its install ID is kept for good, so it can’t be refunded that way again. It names nothing.
• The record of requests like this one - it names no license, server or person.
• Diagnostic messages - the service keeps no log of the requests it receives. Its own diagnostic messages can name a license, and Cloudflare keeps them for up to 7 days.

---

Everything About You

A full copy of everything we hold about you as a customer, across all your licenses, or erasing it, is a request to privacy@sovereign.watch. Your Rights in the privacy policy says how to make one and what we need from you. The same goes for recovery emails sent to your address.