Privacy

Panehop reads the titles of your open windows through the macOS Accessibility API in order to list and search them. That information stays on your Mac. It is never sent anywhere, never written to a log that leaves the machine, and never used for anything but showing you the list.

The app makes two kinds of network request. When you activate a licence, it sends your licence key and a machine identifier to Panehop's licence service to confirm the key is valid; this is repeated at most weekly. Periodically it fetches a small update feed to learn whether a newer version exists; that request carries the app version and macOS version, nothing about you.

There are no analytics in the app. Crash reports are sent only if you turn that on in Settings, and they contain stack traces, not window titles.

The site sets no cookies and shows no consent banner because there is nothing to consent to. It uses a cookie-free, first-party page-view counter (self-hosted Umami, operated for us by PixelCake in the EU) that records the page, the referrer, the browser family and the country derived from your IP address. The IP address itself is not stored. If your browser sends Global Privacy Control or Do Not Track, the counter is not loaded at all.

The site is hosted by Vercel Inc. (United States). Their edge network keeps short-lived request logs — IP address, requested URL, user agent — for security and operations, as any host does.

When you write to support, we process your name, email address and message in order to reply (GDPR article 6(1)(b), or 6(1)(f) if you are asking before you buy). Alongside the message we record the country your request came from, your browser's user agent and the page you sent it from, to recognise abuse (6(1)(f)). Your IP address is used by the bot check at submission time and is not included in the email.

The message is delivered by Resend Inc. (United States), which retains it for 30 days; we keep the conversation in our mailbox for as long as the support case is open and up to twelve months after the last exchange.

Purchases are handled by Stripe as merchant of record through its Link service: your receipt says "Sold through Link" and Stripe collects your payment details and billing address under its own privacy policy, calculates and remits VAT or sales tax, and handles refunds and payment disputes. We receive your name, email address and the order details in order to issue and support your licence; the licence key itself is derived from the order and emailed to you.

Vercel, Resend and Stripe are in the United States. Transfers rely on the EU–US Data Privacy Framework and, where a recipient is not certified, the European Commission's standard contractual clauses.

You can ask what we hold about you, have it corrected or deleted, restrict or object to its processing, and receive a copy. Write to support@panehop.com. If you think we have handled your data wrongly you can complain to the Swedish Authority for Privacy Protection (IMY) or to the supervisory authority where you live.