安全与信任

Toptronic® Lifetime Warranty
Every Toptronic® product carries it: read what is covered →

Two claims matter here: who built the installer you are about to run, and what that installer does once it is running. Both are checkable in a couple of minutes, and this page shows you how. Current build: see the SHA-256 values below.

The installer is code-signed

Every installer we publish carries an EV code-signing certificate issued to Toptronic Ltd by SSL.com, and the signature is timestamped. EV is the strictest class of code-signing certificate, the one banks and hardware vendors use. Signing is what lets Windows show who built the file, and it is why the warning no longer reads "unknown publisher" - but a brand-new signed release can still warn once while its reputation with Microsoft builds. Because the signature carries a timestamp, a build signed while the certificate was valid stays valid after the certificate expires.

设计上离线

The app sends nothing you did not ask to send. Two paths leave it and both are yours to control: Help > Check for Updates, which also runs once at start-up until you untick Check for Updates at Start up, and Help > Send Feedback, which does nothing until you press Send. There is no account, no telemetry, no analytics and no subscription check. Your prompts, templates, projects and PRDs are files on your own PC. Confirm it with your own firewall if you want to; we would rather you did. The website, the Stripe checkout and our email are online, which is obvious. The application is not.

1. Right-click the MSI you downloaded and choose Properties.
2. Open the Digital Signatures tab. It names Toptronic Ltd and shows a timestamp.
3. Run the SHA-256 command below and compare the result with the published value.
4. When Windows asks for permission to install, read the publisher line. It should say Toptronic Ltd.

我们是如何走到今天的

Windows asks for permission before any installer writes to Program Files, and code signing does not remove that consent dialog. If SmartScreen shows "Windows protected your PC" on a brand-new release, that is normal while its reputation builds: click More info, then Run anyway. Check the hash below first if you want to be sure - and if the value you get does not match the published one, stop and email us.

验证您的下载（SHA-256）

下载后，在 Windows 中运行一条命令，并将结果与下方对应数值比较：

certutil -hashfile <downloaded-file> SHA256

下载如何运作

1. 安装包存放在私有存储桶中。它们永远不会公开列出，也没有可以分享的“直接链接”。
2. 购买后您会获得一个专属下载链接：有效期 7 天或 5 次下载，以先到者为准。（已核验的 Beta 测试者在获邀取得版本时，会获得同类的链接。）
3. 过期或用完了？在下载页请求新链接 — 将通过邮件发送。
4. 退款会使下载链接失效。已下载的副本可继续运行 — 应用是离线的，没有可关闭的激活机制。

付款与您的数据

结账完全由 Stripe 托管 — 您的银行卡信息永远不会接触我们的服务器。我们只存储您的邮箱、方案和 Stripe 参考编号，以便交付下载和解答支持问题。详情见隐私政策。

Something look off? Email support@tpee.app and include your order email and your build number, which the app shows under Help > About. We would rather hear about it than not.