Privacy

PadTailor has not been released. Only this website is currently available. The sections about purchases, license activation and app updates describe the planned behavior for launch.

This is a courtesy translation. The German version is legally binding.

In short

This website sets no cookies. I use self-hosted Plausible for visitor statistics without persistent visitor identifiers. The Mac app contains no tracking or analytics. Other data is processed to deliver the website, when you buy, when you activate a license and when you check for updates.

1. Controller

2. Hosting and download

The website and the download file are delivered by Cloudflare (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). When you visit, Cloudflare processes technically necessary data: IP address, time, requested address, browser identifier (user agent) and, if present, the referring page. This is used for delivery, stability and protection against attacks.

The legal basis is my legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). Cloudflare may process data in the USA; Cloudflare is certified under the EU-US Data Privacy Framework, and EU standard contractual clauses apply in addition. I do not use this access data to measure reach and do not combine it with other data.

3. Visitor statistics and browser storage

On padtailor.app I use Plausible Analytics on my own infrastructure at plausible.derremo.xyz. It shows which pages are read, where visits come from and how often download and buy buttons are clicked. A click does not prove a completed download or purchase. Beta and Dev websites are excluded.

Plausible processes the page address, referring page, campaign information, time, browser, operating system, device category and approximate location. IP addresses and browser identifiers are transmitted and processed as a technical necessity; Plausible stores neither full IP addresses nor raw browser identifiers. The visitor identifier changes daily and applies only to this website. Visitors are not profiled across days, devices or websites. I do not send license keys, customer data or checkout addresses as event data.

The dashboard shows aggregated statistics. I use them to improve the website’s content and usability, based on my legitimate interest (Art. 6(1)(f) GDPR). See the Plausible data policy for how the software works; I do not use the cloud infrastructure described there. Requests to my Plausible instance also pass through Cloudflare as described in section 2.

This website sets no cookies and stores nothing in local storage, session storage or IndexedDB. Fonts, images and videos are loaded from this domain, not from third parties.

4. Contact by email

If you email me, I process your email address and the content of your message to answer you. The legal basis is Art. 6(1)(b) GDPR for questions about a purchase or using the app, otherwise Art. 6(1)(f) GDPR. I delete the message once it is resolved unless statutory retention obligations apply. Please never send license keys or payment details.

5. Purchase through Lemon Squeezy

Purchases are handled by Lemon Squeezy (Lemon Squeezy, LLC, USA), which acts as merchant of record and is the seller of the purchase. When you click “Buy”, you are taken to Lemon Squeezy’s checkout. There, Lemon Squeezy processes your name, email address, billing country, payment and order details under its own responsibility – see the Lemon Squeezy privacy policy.

I receive the order details from Lemon Squeezy (name, email address, country, purchased product, license key), but not your full payment details. I use them to fulfil the contract and for support (Art. 6(1)(b) GDPR) and keep them as long as needed for that and as required by law.

6. The Mac app

License activation

When you activate, occasionally validate or deactivate a license, the app sends your license key and a randomly generated installation identifier to Lemon Squeezy’s license API (api.lemonsqueezy.com). Your IP address is transmitted as a technical necessity. The installation identifier contains no hardware or personal data. The legal basis is the performance of the contract (Art. 6(1)(b) GDPR). Once activated, the app works offline.

Trial

The app stores the start and end of the 14-day trial only locally in your Mac’s keychain. No data is sent to me or anyone else for this.

Updates

When you check for updates or turn on automatic checks (off by default), the app fetches an update list from this domain. This transmits your IP address and app version (in the user agent) to Cloudflare. No system profile is sent. The legal basis is Art. 6(1)(f) GDPR.

Diagnostics

You export diagnostics yourself from Settings → Help & About. They stay on your Mac until you share them and contain no license key, email address, user paths or session content.

No analytics

The app contains no third-party analytics, advertising or crash-reporting services.

7. Your remote desktop app

The connection between iPad and Mac is made by the remote desktop app you choose separately. PadTailor does not transmit screen content. That app’s provider’s privacy policy applies to its processing.

8. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You may object at any time to processing based on Art. 6(1)(f) GDPR (Art. 21). Just email hello@derremo.de.

You may also lodge a complaint with a data protection supervisory authority, for example the one responsible for me: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz, Hintere Bleiche 34, 55116 Mainz, Germany.

9. Changes

I update this policy when the website, the app or the services used change. The version published here applies.