Privacy Policy

The short version

This website serves static pages. No analytics, no tracking pixels, no cookies, no ad tech. The app runs entirely on your Mac and sends nothing anywhere, with the two narrow exceptions described below.

What the app stores, and where

Your profiles and rules live in ~/.config/hats/config.json on your Mac.
GitHub tokens stay where the GitHub CLI keeps them. Hats never reads or stores them.
SSH private keys stay in ~/.ssh; passphrases go to the macOS Keychain via ssh-agent.
Your Pro license key is stored in the macOS Keychain, never in a plain file.

The two network calls the app makes

License validation. When you activate or re-validate a Pro license, the app contacts our license server (usehats.app) with your license key, the name of your Mac and an anonymous machine identifier (a one-way hash derived from the hardware UUID, never the UUID itself). Nothing else is transmitted.
Avatars. The app fetches the public GitHub avatar of accounts you connect, from GitHub's public endpoint, and caches it locally. No token is involved.

What we never collect

No telemetry, no usage analytics, no crash reporting, no email addresses, no repository contents, no commit data. We can't leak what we never had.

Purchases

Pro licenses are sold through Stripe Managed Payments, with Stripe (via Link) acting as merchant of record. The personal data involved in a purchase (name, billing address, email, payment details) is handled by Stripe under their privacy policy. We never see your card details. We keep the email used at checkout (to send you the key and to send it again on request), a Stripe reference for the purchase, and the machines the key is activated on. License emails are delivered through Resend.

Software updates

When enabled, the app checks a static update feed to see if a newer version exists. This is a plain file download; no identifier is attached.

Changes and contact

If this policy changes, the "last updated" date above changes with it. Questions: contact@usehats.app.