Privacy Policy

This policy explains how PommeToys handles information when you use the macOS app, visit this website, purchase a license, or contact support.

At a glance: PommeToys features run on your Mac. Limited information leaves your device only when it is needed for trials, licensing, updates, purchases, email delivery, or support.

Information sent by the app

• Trial: when a trial starts, the app sends a pseudonymous device identifier and the app version. The identifier is a one-way SHA-256 hash derived from your Mac's hardware UUID with a PommeToys-specific value. We do not send the original UUID and cannot recover it from the hash. The identifier prevents a trial from being reset by reinstalling the app.
• Activation: the app sends your license key, the pseudonymous device identifier, your Mac's name, and the app and macOS versions. The Mac name lets you recognize a device if you later need to deactivate it.
• License validation: about every 14 days, the app may send its signed license token and device identifier to check whether the license remains valid. A network failure does not disable a valid perpetual license; the app tries again later.
• Update checks: the app periodically downloads a small version file. The request does not include a license key, device identifier, or information about how you use the app.

Purchases and email

Paddle is the merchant of record and authorised reseller for PommeToys. Paddle collects and processes payment details, billing information, tax information, and transaction data under its privacy notice. We do not receive your full payment-card details. Paddle provides us with the purchase email address, transaction reference, and status needed to issue a license, provide support, and handle refunds or chargebacks.

To show the current price, this website asks Paddle for it when the page loads. Like any web request, this reveals your IP address to Paddle, which may use it to determine your country or region so that the local price is shown. For the same purpose, the website reads your browser's time-zone setting; it is used only on your device and is not sent to us.

For visitors in mainland China, the pricing section asks for your email address before checkout. When you press Buy, that address is passed to Paddle together with the country, so that the checkout opens directly on the payment step. Paddle receives the address whether or not you complete the purchase and handles it under its privacy notice. Apart from the temporary storage after payment described below, this website does not store it, and the field is masked from our analytics tools.

After payment, this page shows your license key directly. To make that possible, your browser generates a one-time claim token when checkout starts; once payment completes, the page uses it to fetch the newly issued key from our licensing server. So that the key can still be shown if you reload the page, the token and the delivery email address are kept temporarily in the current tab's session storage. They are removed when you close the confirmation card or the tab, are never written to cookies or local storage, and are not sent to our analytics tools. Paddle receives only a fingerprint (a one-way hash) of the token, never the token itself.

License delivery and license-recovery emails are sent through Resend. Resend processes the recipient address and technical delivery information under its privacy policy. We do not use your purchase email for marketing unless you separately ask to receive it.

This website

This website uses Google Analytics and Microsoft Clarity to understand how visitors use it: which pages are viewed, and how people interact with them, such as clicks and scrolling. Both services set cookies and process usage data under their own privacy terms — see how Google uses this data and the Microsoft Privacy Statement. We use these statistics only to improve PommeToys and this website, not for advertising.

This website also uses Cloudflare Web Analytics, provided by our hosting provider, to count page views and measure how quickly pages load. According to Cloudflare, the service does not use cookies or local storage and does not fingerprint individuals by IP address, browser user agent, or other data — see Cloudflare's privacy policy.

Beyond that, the website uses your browser's local storage only to remember your language, your light or dark appearance preference, and whether the interface sounds are switched on. It also uses session storage to record that a one-time hint has already been shown; that entry disappears when you close the tab. Those preferences stay on your device and can be cleared in your browser settings.

Like most hosted websites, our infrastructure provider may process limited technical data such as your IP address, request time, requested URL, and browser information to deliver and secure the site. We do not use those logs to build profiles or measure individual behaviour.

Release notification emails

If you enter your email address in the notification form on this website, we use that address solely to notify you when PommeToys is released. We first send a confirmation email to that address, and the subscription takes effect only after you follow the confirmation link it contains. We do not sell, rent, or share the address with third parties.

The address is stored on Cloudflare infrastructure and the messages are sent through Resend. Every message contains an unsubscribe link, and you can also ask us to remove you at any time by emailing [email protected]. We keep the address until you unsubscribe, or until it is no longer needed for the release announcement.

Why we use this information

We use the information described above to provide the trial and license you requested, deliver purchases, recover license keys, provide support, check for updates, send the release notification you subscribed to, prevent fraud or repeated trial resets, secure the service, and meet legal or accounting obligations. Where privacy law requires a legal basis, these activities rely on performance of our contract, our legitimate interests in operating and protecting PommeToys, compliance with law, or your consent, as applicable.

Service providers and international transfers

Licensing and website services run on Cloudflare infrastructure; payment processing is provided by Paddle; and transactional email is provided by Resend. These providers process information only for their respective services and under their own contractual and privacy obligations. They may process information in countries other than your own. Where required, we and our providers use recognised safeguards for international transfers.

We do not sell personal information, rent it, or share it for targeted advertising. We may disclose information if required by law, to protect rights and security, or as part of a business transfer subject to appropriate confidentiality safeguards.

How long we keep information

• Trial records: the pseudonymous device identifier and trial dates are kept for as long as reasonably needed to enforce one trial per device and prevent abuse.
• License records: purchase email, license key, transaction reference, activation details, versions, and timestamps are kept while the license remains active. Some transaction or support records may be retained longer where needed for tax, accounting, fraud prevention, disputes, or other legal obligations.
• Technical logs: infrastructure logs are retained for limited periods set by the relevant provider and operational settings.

Your choices and rights

• You can use the full 14-day trial without giving us your name or email address.
• You can turn off automatic update checks in the app.
• Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal information, and to complain to your local data-protection authority.
• To make a request, email [email protected]. We may need to verify that you control the purchase email or license. Deleting data required to validate a license will permanently disable that license.

Security

We use reasonable technical and organisational measures to protect information, including encrypted HTTPS connections, restricted service credentials, and signed license tokens. No internet service can guarantee absolute security.

Children

PommeToys is a general-audience productivity app and is not directed to children. We do not knowingly collect personal information from children who cannot legally provide it. If you believe a child has provided information to us, please contact us so we can review and delete it where appropriate.

Changes

If this policy changes, we will update this page and the date above. If a change materially affects how existing customer information is handled, we will provide additional notice where reasonably possible.

Contact

PommeToys is responsible for the licensing and support information it receives. Paddle is separately responsible for the purchase and payment information it collects as merchant of record.

Questions or privacy requests: [email protected]