Privacy Policy

Draft. This page is a placeholder and hasn’t been reviewed by a lawyer yet.

Last updated: [DATE]

Short version: your stuff stays on your Mac. No account, no cloud, no tracking of what you copy. This policy lists every piece of personal data involved in using Duh and this website. The controller is [LEGAL NAME],[COUNTRY], [CONTACT EMAIL].

What never leaves your Mac

Clipboard history, screenshots, text recognized from screenshots (OCR), PDFs and any other files you use with Duh are processed and stored only on your Mac. None of it is ever sent to us or anyone else. Passwords you copy are not saved to clipboard history.

What we collect, and why

1. Your purchase email (via Paddle)

When you buy Duh, Paddle.com (our reseller and Merchant of Record) processes your order and payment. Paddle shares your email address and order details with us so we can issue and resend your license key and help with support. We never see your card details. Paddle’s own handling of your data is described in thePaddle privacy notice.

Legal basis: performance of a contract.

2. A hashed machine ID (licensing)

To activate and check your license, the App sends exactly three things to our license server: your license key, a one-way hash of an identifier of your Mac, and the App version. Nothing else. The hash can’t be turned back into your Mac’s serial number or hardware ID. We use it only to keep each license to its limit of 2 Macs.

Legal basis: performance of a contract.

3. Your email, if you ask for something

If you join the beta waitlist or use the lost key form, we receive the email address you enter. We use it only for that request (beta invitations, or resending your key). You can ask us to delete it at any time.

Legal basis: consent (waitlist) and performance of a contract (lost key).

4. Update checks

The App checks duhkit.app for updates. The request sends only the App version. Like any web request, it also reveals your IP address to our host, Cloudflare.

5. Website analytics, without cookies

This website uses [Plausible / Umami], a privacy-friendly analytics tool that sets no cookies and stores no personal data. It counts page views, referrers, browser type and country in aggregate. Your IP address is not stored.

Cookies

This website sets no cookies. When you open checkout, Paddle may set cookies needed to process your payment.

Who processes data for us

  • Paddle.com: checkout, payments, tax, receipts.
  • Cloudflare: website hosting and delivery.
  • [LICENSE SERVER HOST]: license server and waitlist.
  • [EMAIL PROVIDER]: sending license keys and beta invitations.
  • [Plausible / Umami]: cookieless website analytics.

We don’t sell or rent personal data, and we don’t use it for advertising.

How long we keep it

  • Purchase email and license records: for as long as your license exists, plus [N] years where tax law requires.
  • Hashed machine IDs: until you deactivate that Mac or your license ends.
  • Waitlist emails: until launch plus [N] months, or until you unsubscribe.

Your rights

You can ask to access, correct, delete or export your personal data, or object to how we use it, by emailing[CONTACT EMAIL]. You can also complain to your local data protection authority.

Changes

If this policy changes, we’ll post the new version here and update the date above.