What data BRUTAL collects and sends (and what it never does)

Here is exactly what data the app and website touch, what they send, and what they never do. The short version: the app runs on your PC and uploads none of your files, browsing, or settings. The longer version is below. The authoritative source is always the Privacy Policy.

What the app sends

The app does its work locally. It does not upload your files, your browsing, or your optimization settings anywhere.

Your email, if you sign in (optional). The free app works without an account. Signing in with a passwordless 6-digit code (or a magic link) lets you recover your license on another PC, and it is how a plan you buy reaches the app. That email becomes your license identity. See Email sign-in help.
Your license key + a one-way machine hash (to verify). When there is a license on your PC, the app contacts the license server to check it. It sends your license key and a one-way hash of a machine identifier (built from your processor ID and motherboard serial). The hash cannot be reversed into your hardware details. This is what binds a paid key to one PC.

For your license, that is all the app sends: your email if you sign in, then your key and a machine hash when it checks a license. A few other features make small, stated network calls (update checks, anonymous version counts, the game catalog, help search and, if you use it, Smart Route), and the Privacy Policy lists every one with exactly what it sends. The optimization work itself — modules, Guardian, benchmarks, disk and drive tools — runs on your PC. See Using BRUTAL offline.

What the website stores

The website holds your email so it can issue and recover your license, send your sign-in codes, and (for Pro and Ultra) email renewal reminders. That is the full purpose — there is no marketing use.

Bot protection uses Cloudflare Turnstile on forms.
Hosting is Cloudflare, which keeps standard request logs (IP address, user agent).
Transactional email (sign-in codes, license delivery, reminders) goes through our email provider.
Payments run through Razorpay. We never see or store your card details.

What we never do

We don't sell your data. We don't run advertising or profiling trackers. We don't build a profile on you. The app installs no kernel driver and reads none of your personal data to do its job.

This article summarizes the policy in plain English. If anything here ever conflicts with the official text, the Privacy Policy is the source of truth.

Related: review or change the reversible telemetry and tracking toggles in the Privacy Center, and manage your email and license at your account online. For privacy questions or a data request, email [email protected]; for anything else, [email protected].

FAQ

Can BRUTAL see my files or what I browse?

No. The app runs locally and does not upload your files, browsing, or settings.

Can the machine hash be turned back into my hardware details?

No. It is a one-way hash of a machine identifier, used for licensing and for rolling out updates gradually. It cannot be reversed.

Do you store my card details?

No. Payments and renewals run through Razorpay, and we never see or store your card details.