Security & trust

Toptronic® Lifetime Warranty
Every Toptronic® product carries it: read what is covered →

Two claims matter here: who built the installer you are about to run, and what that installer does once it is running. Both are checkable in a couple of minutes, and this page shows you how. Current build: see the SHA-256 values below.

The installer is code-signed

Every installer we publish carries an EV code-signing certificate issued to Toptronic Ltd by SSL.com, and the signature is timestamped. EV is the strictest class of code-signing certificate, the one banks and hardware vendors use. Signing is what lets Windows show who built the file, and it is why the warning no longer reads "unknown publisher" - but a brand-new signed release can still warn once while its reputation with Microsoft builds. Because the signature carries a timestamp, a build signed while the certificate was valid stays valid after the certificate expires.

Offline by design

The app sends nothing you did not ask to send. Two paths leave it and both are yours to control: Help > Check for Updates, which also runs once at start-up until you untick Check for Updates at Start up, and Help > Send Feedback, which does nothing until you press Send. There is no account, no telemetry, no analytics and no subscription check. Your prompts, templates, projects and PRDs are files on your own PC. Confirm it with your own firewall if you want to; we would rather you did. The website, the Stripe checkout and our email are online, which is obvious — and the website now measures visits with Google Analytics and a Google Ads tag, only after you accept the choice it shows you. The application is not online, and measures nothing.

1. Right-click the MSI you downloaded and choose Properties.
2. Open the Digital Signatures tab. It names Toptronic Ltd and shows a timestamp.
3. Run the SHA-256 command below and compare the result with the published value.
4. When Windows asks for permission to install, read the publisher line. It should say Toptronic Ltd.

HOW DID WE GET HERE

Windows asks for permission before any installer writes to Program Files, and code signing does not remove that consent dialog. If SmartScreen shows "Windows protected your PC" on a brand-new release, that is normal while its reputation builds: click More info, then Run anyway. Check the hash below first if you want to be sure - and if the value you get does not match the published one, stop and email us.

Verify your download (SHA-256)

A signature proves who built the file. A hash proves the bytes arrived unchanged. Run one command in Windows and compare the result with the matching value below:

certutil -hashfile <downloaded-file> SHA256

How downloads work

1. Installers live in a private storage bucket. They are never publicly listed, and there is no “direct link” to share.
2. After a purchase you get a personal download link: valid for 7 days or 5 downloads, whichever comes first. (A verified beta tester is issued the same kind of link when a build is offered to them.)
3. Expired or used up? Request a fresh link on the download page; it arrives by email.
4. A refund revokes the download links. Already-downloaded copies keep running; the app is offline and has no activation to switch off.

Payments & your data

Checkout is hosted entirely by Stripe, so your card details never touch our servers. We store only your email, your plan, and Stripe's reference IDs, so we can deliver your download and answer support questions. Details: privacy policy.

Something look off? Email support@tpee.app and include your order email and your build number, which the app shows under Help > About. We would rather hear about it than not.