Privacy

Panehop reads the titles of your open windows through the macOS Accessibility API in order to list and search them. That information stays on your Mac. It is never sent anywhere, never written to a log that leaves the machine, and never used for anything but showing you the list.

The app makes two kinds of network request. When you activate a licence, it sends your licence key and a machine identifier to Panehop's licence service to confirm the key is valid; this is repeated at most weekly. Periodically it fetches a small update feed to learn whether a newer version exists; that request carries the app version and macOS version, nothing about you. We count these update checks in aggregate, how many and from which app versions. That is the only usage measurement Panehop has.

There are no analytics in the app. Crash reports are on by default and can be turned off in Settings; they contain stack traces, never window titles or anything personal.

The site sets no cookies and shows no consent banner because there is nothing to consent to. It uses a cookie-free, first-party page-view counter (self-hosted Umami, operated for us by PixelCake in the EU) that records the page, the referrer, the browser family and the country derived from your IP address. The IP address itself is not stored. If your browser sends Global Privacy Control or Do Not Track, the counter is not loaded at all.

The site is hosted by Vercel Inc. (United States). Their edge network keeps short-lived request logs (IP address, requested URL, user agent) for security and operations, as any host does.

When you write to support, we process your name, email address and message in order to reply (GDPR article 6(1)(b), or 6(1)(f) if you are asking before you buy). Alongside the message we record the country your request came from, your browser's user agent and the page you sent it from, to recognise abuse (6(1)(f)). Your IP address is used by the bot check at submission time and is not included in the email.

The message is delivered by Resend Inc. (United States), which retains it for 30 days; we keep the conversation in our mailbox for as long as the support case is open and up to twelve months after the last exchange.

If you subscribe to release notes, we store your email address, its confirmation status, the times you subscribed, confirmed or unsubscribed, and the random token that makes your confirm and unsubscribe links work. The legal basis is consent (GDPR article 6(1)(a)): nothing is sent until you click the confirmation link, and every email carries a one-click unsubscribe link.

The list lives in a PostgreSQL database operated for us by Ubicloud, Inc. in their European region, and confirmed addresses are mirrored to Resend, which delivers the emails. Unsubscribing stops the emails immediately; write to us and the row is deleted entirely.

If you ask us to email a Panehop download link, we use the address only to deliver that one message. It is not added to the newsletter or stored in our database. Resend delivers the email and retains the message and delivery log for 30 days.

Purchases are handled by Stripe as merchant of record through its Link service: your receipt says "Sold through Link" and Stripe collects your payment details and billing address under its own privacy policy, calculates and remits VAT or sales tax, and handles refunds and payment disputes. We receive your name, email address and the order details in order to issue and support your licence; the licence key itself is derived from the order and emailed to you.

Vercel, Resend, Stripe and Ubicloud are in the United States. Transfers rely on the EU–US Data Privacy Framework and, where a recipient is not certified, the European Commission's standard contractual clauses.

You can ask what we hold about you, have it corrected or deleted, restrict or object to its processing, and receive a copy. Write to support@panehop.com. If you think we have handled your data wrongly you can complain to the Swedish Authority for Privacy Protection (IMY) or to the supervisory authority where you live.