보안 및 신뢰
Two claims matter here: who built the installer you are about to run, and what that installer does once it is running. Both are checkable in a couple of minutes, and this page shows you how. Current build: see the SHA-256 values below.
The installer is code-signed
Every installer we publish carries an EV code-signing certificate issued to Toptronic Ltd by SSL.com, and the signature is timestamped. EV is the strictest class of code-signing certificate, the one banks and hardware vendors use. Signing is what lets Windows show who built the file, and it is why the warning no longer reads "unknown publisher" - but a brand-new signed release can still warn once while its reputation with Microsoft builds. Because the signature carries a timestamp, a build signed while the certificate was valid stays valid after the certificate expires.
설계상 오프라인
The app sends nothing you did not ask to send. Two paths leave it and both are yours to control: Help > Check for Updates, which also runs once at start-up until you untick Check for Updates at Start up, and Help > Send Feedback, which does nothing until you press Send. There is no account, no telemetry, no analytics and no subscription check. Your prompts, templates, projects and PRDs are files on your own PC. Confirm it with your own firewall if you want to; we would rather you did. The website, the Stripe checkout and our email are online, which is obvious. The application is not.
- Right-click the MSI you downloaded and choose Properties.
- Open the Digital Signatures tab. It names Toptronic Ltd and shows a timestamp.
- Run the SHA-256 command below and compare the result with the published value.
- When Windows asks for permission to install, read the publisher line. It should say Toptronic Ltd.
Windows asks for permission before any installer writes to Program Files, and code signing does not remove that consent dialog. If SmartScreen shows "Windows protected your PC" on a brand-new release, that is normal while its reputation builds: click More info, then Run anyway. Check the hash below first if you want to be sure - and if the value you get does not match the published one, stop and email us.
다운로드 확인 (SHA-256)
다운로드 후 Windows에서 명령 하나를 실행하고 결과를 아래의 해당 값과 비교하세요:
certutil -hashfile <downloaded-file> SHA256
loading…
해시는 라이브 릴리스 기록에서 불러옵니다.
다운로드 작동 방식
- 설치 프로그램은 비공개 스토리지 버킷에 보관됩니다. 공개적으로 나열되지 않으며 공유할 “직접 링크”도 없습니다.
- 구매 후에는 개인 다운로드 링크가 발급됩니다. 7일 또는 5회 다운로드 중 먼저 도달하는 시점까지 유효합니다. (검증된 베타 테스터에게는 빌드가 제공될 때 같은 종류의 링크가 발급됩니다.)
- 만료되었거나 모두 사용했나요? 다운로드 페이지에서 새 링크를 요청하세요 — 이메일로 도착합니다.
- 환불 시 다운로드 링크는 취소됩니다. 이미 다운로드한 복사본은 계속 작동합니다 — 앱은 오프라인이며 끌 수 있는 활성화 기능이 없습니다.
결제 및 데이터
결제는 전적으로 Stripe가 호스팅합니다 — 카드 정보가 우리 서버에 닿지 않습니다. 다운로드 전달과 지원 응답을 위해 이메일, 플랜, Stripe 참조 ID만 보관합니다. 자세한 내용: 개인정보 처리방침.
Something look off? Email support@tpee.app and include your order email and your build number, which the app shows under Help > About. We would rather hear about it than not.
