Privacy Policy

Who we are

HashCopy is made by The Bunker Desenvolvimento e Tecnologia LTDA, a Brazilian company. For anything about this policy, write to support@hashcopy.app.

What the site records

We measure traffic with Umami, running on our own servers. No cookies, no third-party trackers, no ads. What gets recorded:

• The page viewed and where the visit came from.
• Country and city, derived from the IP at the moment of the visit. The IP is not stored.
• The browser type.

Clicks on "Download" are counted in aggregate: day, version, language and source channel (sanitised utm_source). No personal identifier.

When you buy

Checkout is handled by Stripe. Your card details go straight to them and never touch our server. What we keep:

• Your email.
• The order details: amounts, currency and status.
• The licence we issued.

Transactional emails — the key, key recovery, the verification code — go out via Resend. There is no newsletter and we send no marketing.

What the app sends

On first use, to run the free trial, the app registers with our server:

• A machine identifier: an opaque code derived from the hardware, which reveals nothing about you.
• The machine name — the one shown in macOS System Settings.
• The system and app versions.
• The trial start and end dates.

During the trial, the app checks in with the server at most once every 12 hours, with the same data.

With a licence activated, the same per-machine data applies, plus the key. The app revalidates the licence in the background every 12 hours. Offline, it keeps working: up to 45 days with an active licence; during the trial, the local deadline applies.

On launch, the app asks our server whether there is an update (via Sparkle). We count launches in aggregate, by day and version, with no identifier.

Your rights

Brazil’s data protection law (LGPD) guarantees you access, correction and deletion of your data. Just ask at support@hashcopy.app.

If you ask us to delete your licence data, we can no longer support your key.

Retention: we keep the data for as long as the licence exists, plus whatever tax law requires about sales records, for as long as it requires.

Where the data lives

On our own servers, rented from a hosting provider. Stripe (payments) and Resend (email) act as processors: each sees only what it needs to do its part.