安全與信任
Two claims matter here: who built the installer you are about to run, and what that installer does once it is running. Both are checkable in a couple of minutes, and this page shows you how. Current build: see the SHA-256 values below.
The installer is code-signed
Every installer we publish carries an EV code-signing certificate issued to Toptronic Ltd by SSL.com, and the signature is timestamped. EV is the strictest class of code-signing certificate, the one banks and hardware vendors use. Signing is what lets Windows show who built the file, and it is why the warning no longer reads "unknown publisher" - but a brand-new signed release can still warn once while its reputation with Microsoft builds. Because the signature carries a timestamp, a build signed while the certificate was valid stays valid after the certificate expires.
設計上離線
The app sends nothing you did not ask to send. Two paths leave it and both are yours to control: Help > Check for Updates, which also runs once at start-up until you untick Check for Updates at Start up, and Help > Send Feedback, which does nothing until you press Send. There is no account, no telemetry, no analytics and no subscription check. Your prompts, templates, projects and PRDs are files on your own PC. Confirm it with your own firewall if you want to; we would rather you did. The website, the Stripe checkout and our email are online, which is obvious. The application is not.
- Right-click the MSI you downloaded and choose Properties.
- Open the Digital Signatures tab. It names Toptronic Ltd and shows a timestamp.
- Run the SHA-256 command below and compare the result with the published value.
- When Windows asks for permission to install, read the publisher line. It should say Toptronic Ltd.
Windows asks for permission before any installer writes to Program Files, and code signing does not remove that consent dialog. If SmartScreen shows "Windows protected your PC" on a brand-new release, that is normal while its reputation builds: click More info, then Run anyway. Check the hash below first if you want to be sure - and if the value you get does not match the published one, stop and email us.
驗證您的下載(SHA-256)
下載後,在 Windows 中運行一條命令,並將結果與下方對應數值比較:
certutil -hashfile <downloaded-file> SHA256
loading…
雜湊值從實時發佈記錄載入。
下載如何運作
- 安裝包存放在私有儲存桶中。它們永遠不會公開 列出,也沒有可以分享的「直接連結」。
- 購買後您會獲得一個專屬下載連結:有效期為 7 天或 5 次下載,以先到者為準。(已核實的 Beta 測試者在獲邀取得版本時,會獲得同類型的連結。)
- 過期或用完了?在下載頁請求新鏈接 — 將通過郵件發送。
- 退款會使下載連結失效。已下載的副本可繼續 運行 — 應用是離線的,沒有可關閉的啟用機制。
付款與您的數據
結賬完全由 Stripe 託管 — 您的銀行卡資訊永遠不會接觸我們的服務器。我們只存儲您的郵箱、方案和 Stripe 參考編號,以便交付下載和解答支援問題。詳情見私隱政策。
Something look off? Email support@tpee.app and include your order email and your build number, which the app shows under Help > About. We would rather hear about it than not.
