Privacy policy
What MakerNotch and this website process, and how to exercise your rights.
Last updated:
Who is responsible
Francisco Alé Palacios, trading as Alpa Digital, Calle Mayo 1, Sevilla, Spain, is responsible for the personal data processed to operate MakerNotch and this website. Contact: makernotch@alpa.digital.
Polar Software, Inc. is the seller and merchant of record for purchases. It processes checkout, payment and billing data under its own privacy policy and buyer terms.
Data in the app
MakerNotch does not require a MakerNotch account or send your connected providers’ data through a MakerNotch server. When you connect GitHub, GitLab, Vercel, Stripe, Polar, Linear, DataFast, Sentry, Supabase or Resend, your Mac contacts that provider directly using the key you supply. We do not receive your keys, provider responses, projects, notes, snippets or settings. Keys are verified with a read request and stored in the macOS Keychain; other app data is stored locally on your Mac.
The app is read-only with one action you can initiate: creating an empty GitHub repository. Optional music controls use local Apple Events; optional notifications are local macOS notifications. The app does not request Accessibility or Screen Recording access and has no in-app analytics.
License activation
To activate and periodically validate a license, the app sends Polar your license key, a pseudonymous identifier for this Mac, and a label to help you recognise it in the customer portal. The identifier is a SHA-256 hash of the Mac’s hardware UUID with a fixed MakerNotch-specific prefix; the UUID itself is not sent. The label contains the Mac model identifier and a short part of the hash. This identifier can be linked to a license and is treated as personal data, not anonymous data. License requests do not include project names, provider keys or provider data. If you separately enable the optional Polar business integration, your Mac sends Polar its organization access token and the optional product ID to retrieve aggregate business metrics directly; the token remains stored in your Mac’s Keychain.
License validation normally runs every three days; the app allows up to 30 days offline. Processing is necessary to provide and protect the one-Mac-at-a-time license. See Polar’s privacy policy for its retention and processing of activation records.
Orders and support
Polar handles payment and billing. Order and customer details made available to us through Polar may include your name, email address, country, order, license and refund status. We use them only to deliver the product, manage the license, answer support requests and meet applicable legal duties. If you email us, we process your address and message to respond.
The legal bases are performance of the purchase and license agreement, compliance with applicable legal obligations, and our legitimate interest in providing support and preventing license misuse. We retain order and tax-related records for the periods required by law, and support correspondence only as long as needed to resolve the request and any related legal obligation or dispute. Local app data remains on your Mac until you delete it.
Updates and this website
If you enable automatic updates, Sparkle requests the update feed from this website, normally once a day. Vercel, our hosting provider, may process the IP address, user agent and requested URL in technical logs to serve and secure the site. Your theme preference is stored in your browser’s local storage; accent previews are temporary. Hosting and security processing relies on our legitimate interest in operating a secure website.
Our service providers may process information outside the European Economic Area; their policies describe the applicable safeguards. We do not sell your personal data.
Campaign links may contain fixed source and creative labels (UTM parameters). We pass recognised labels to Polar when you open checkout. They may be associated with your order, without adding a visitor identifier by themselves.
Optional advertising measurement
With your consent, we use Vercel Web Analytics to measure page views and aggregate traffic statistics without analytics cookies. We remove query parameters and URL fragments from the page URLs sent to this service. It loads only after you accept measurement and stops sending events when you withdraw consent. See Vercel Web Analytics privacy information.
With your consent, we also use DataFast on website pages to measure visits and traffic sources. Its script receives browsing and browser information, including the IP address and uses cookies prefixed datafast_, including visitor (up to one year) and session (30 minutes, renewed with activity) identifiers. It loads only after measurement is accepted; you can withdraw via the preferences button on this page. This installation does not connect Polar orders to DataFast. See the DataFast privacy policy.
With your consent, the landing page loads the Meta Pixel to measure visits and checkout starts. Meta receives browser and connection information (including IP address and user agent), page URL and advertising identifiers _fbp and, if you arrived from a Meta ad, _fbc. These advertising cookies may last up to 90 days. The Mac app does not contain the Pixel or advertising analytics.
When you consent and open checkout, we pass a random signed reference to Polar. If Polar confirms a paid MakerNotch order while your server consent record remains valid, our server sends Meta a Purchase event containing the advertising identifiers, order identifier, product, amount and currency. This integration does not send your name, email, license key or payment card details to Meta. A checkout visit or thank-you page alone is never counted as a purchase. Orders without valid consent are not sent to Meta.
With your consent, if you arrive from an X ad, we retain its click identifier (twclid) in session storage for up to 24 hours and in the same short-lived server consent record. After Polar confirms a paid MakerNotch order, X Conversion API receives the click identifier, order identifier, amount and currency. We do not send X your name, email, IP address, license key or payment details. Orders without a valid consenting X click are not sent to X. Withdrawal removes the stored click identifier and blocks future server conversions. X applies its own Privacy Policy.
Your choice is stored locally for up to 180 days (mn-measurement-choice). A secure first-party cookie (__Host-mn-measurement, 24 hours) links the browser to a short-lived consent record in private Vercel storage. Consent records expire after 24 hours; temporary records are scheduled for deletion within 72 hours. The payment reference may remain with your order in Polar under its retention rules. Meta applies its own retention and processing rules in its Privacy Policy.
Use Measurement preferences on this page to accept, reject or withdraw consent. Rejecting does not prevent purchasing or using the app. Withdrawal stops future measurement and deletes the Meta and DataFast cookies on this domain; it does not undo events already sent. You can also contact us to exercise your rights. Optional advertising measurement is based on your consent, including where data is sent via the server. Meta may process information outside the EEA, subject to the safeguards described in its policy.
Your rights
You may request access, rectification, erasure, restriction, portability or object to processing where applicable. If processing is based on consent, you may withdraw it at any time. Write to makernotch@alpa.digital. You may also complain to the Spanish Data Protection Agency (AEPD).
Changes
We will publish changes to this policy here with an updated date.
Windows interest list
When you join, we send your email, language, date and consent to makernotch@alpa.digital through Resend. We do not create a website database of interested people: the request remains in our inbox and may appear in the provider’s delivery logs. With your consent, we use your email only to manage your interest and share news about a possible Windows version. We do not verify ownership of the address on signup. We retain the request while managing this initiative or until you ask us to delete it. Withdraw consent by emailing makernotch@alpa.digital. Resend privacy policy.