Privacy

Last updated October 20, 2026

No accounts and no ads. I collect only what's needed to sell you a license and make sure it works. The few exceptions are listed below.

At checkout

Checkout runs on Stripe. Stripe collects your email, your payment details and a billing address (used to work out sales tax). Stripe handles that data under its own privacy policy. I can see your email, name, country and what you bought in my Stripe dashboard. I never see your full card number. Until the Spiral Collection moves to Stripe, its checkout runs on Whop, which handles that data under its own privacy policy.

License data

My license server (on Cloudflare) keeps:

• your email, plus a one-way hash of it so a lost key can be resent
• your license key, the app, and the Stripe IDs for the purchase (payment or subscription), its status and dates
• for each Mac that activates the key, a one-way hash of the Mac's hardware ID and the activation date. This enforces the 3-Mac limit. The hash can't be turned back into the hardware ID.
• IP addresses, used to rate-limit key activations and resend requests. Activation limits are held in memory. Resend limits are stored in a rate-limit table.
• email addresses typed into the key-resend form, and a log of the emails sent about your purchase

I use this only to issue, check and resend licenses, and to handle refunds and support. I don't sell it or share it, except with Stripe and Cloudflare as needed to run the service. Emails I send are about your purchase only, never marketing.

Websites

This site and the app sites have no analytics, ads or trackers. They're hosted on Cloudflare, which keeps standard server logs, such as IP address and browser, for security. One exception: the Spiral Collection site still loads Whop's pixel from the old checkout. It will be removed when Spiral moves to Stripe.

Apps

The apps have no ads or analytics. For licensing, they contact only the license server, to activate and recheck your key. Some apps also check for updates, which shows your IP address and app version to Cloudflare. Ember also sends crash reports to PostHog so I can fix crashes. Those reports contain technical details about the crash, not your files.

Your choices

Email [email protected] to see or delete your data. Deleting your license data also ends your license, so I'll check with you first. License data is kept while the license exists. Purchase records are kept as long as tax law requires, usually 7 years.