Privacy

Orbital is built to keep your data on your Mac. There are no accounts, no analytics, no ads, and no tracking — in the app and on this website. This page lists the few cases where any data leaves your machine, completely.

Who is responsible

Timo Leisengang (The AppStudio), Kunreuthstr. 61, 81249 München, Deutschland. Contact: [email protected].

The free trial

To make the 7-day trial work without an account, the app sends a one-way hashed device identifierto our trial service: the SHA-256 hash of your Mac’s hardware platform UUID combined with a fixed application salt. This hash cannot be reversed into the UUID and identifies neither you nor your Mac to anyone outside this single purpose. The service (a Cloudflare Worker operated by us) stores the hash together with the trial’s start and end dates, so a trial cannot be restarted by reinstalling. No name, email, or payment information is involved. Legal basis: legitimate interest in preventing trial abuse (Art. 6 (1) f GDPR). You can request deletion of your trial record at any time via the contact above.

Purchases and license activation

Purchases are processed by Lemon Squeezy as merchant of record; your payment details go to them, not to us — see the Lemon Squeezy privacy policy. When you activate a license, the app sends your license key and a Mac name you choose to the Lemon Squeezy licensing API, and receives back the purchase email so the app can show who the license belongs to. The license state is stored in your Mac’s Keychain.

Software updates

The app periodically checks orbital.theappstudio.net for signed updates (Sparkle). This is an ordinary HTTPS request; like any web request it exposes your IP address to our hosting provider (Cloudflare). No system profile or usage data is attached.

Clipboard history

Clipboard history is stored only on your Mac, encrypted at rest (AES-GCM) with a key that lives in your Keychain. It is never transmitted anywhere. You can exclude apps from capture and adjust retention in Settings.

This website

Hosted on Cloudflare Pages. It sets no cookies and runs no analytics. Cloudflare processes IP addresses technically to serve the site.

Your rights

Under the GDPR you have the right to access, rectify, and erase personal data, the right to restrict or object to processing, and the right to lodge a complaint with a supervisory authority. Since we hold almost nothing about you, the fastest path is simply writing to [email protected].