Your device. Your data.
We only use what is needed to validate your license and protect downloads.
A random identity, no hardware fingerprint
Inustial keeps its files, settings and this identity in a .inustial folder next to Inustial Loader.exe (or in your user folder if you choose it). The launcher generates a key pair for this installation. The private key stays encrypted with Windows data protection. The server receives the public key and an identifier derived from it. We do not collect serial numbers, MAC addresses, motherboard or disk data, Windows names or Steam identifiers.
What it is used for
To verify that the activation and later requests come from the same installation, to stop a key from being reused on another PC, and to allow a controlled device recovery.
Expiry and retention
Access lasts five hours from the first activation. Inustial keys, Work.ink completion tokens and recovery codes are identified on the server by HMACs. A necessary HttpOnly cookie links your browser to a key request: 30 minutes to complete Work.ink, then up to 24 hours to retrieve an unused key. The key and any retry token are encrypted using that browser secret; neither is stored in plain text. Expired key requests are removed within approximately two days. Minimal operational logs, expired licenses and audit events are deleted after 30 days. Request counters expire within minutes.
Cloudflare processes your IP address to provide the service. Inustial temporarily keeps an HMAC of the IP to rate-limit requests and downloads, without storing the IP in plain text. Work.ink handles data under its own policy; Inustial discards the IP field returned by Work.ink.
Recovering a device
Save the license ID and recovery code that the launcher shows only once. On the new PC, choose “Recover device” on the key screen and enter both. You can change PC once while the license is valid; the expiry date stays the same and the previous installation loses access at its next validation.
If you lose the code, get a new key. There is no recovery based on hardware data. To delete the local identity, remove the launcher and its user data; that alone does not reset a linked license.
Contact
The service is being prepared. A contact channel for privacy requests will be published before general availability.