Legal
Privacy Policy
Draft. Not yet in force: the operator's details and some terms are still to be filled in.
Effective [Effective date]
Who we are
Claron is made and sold by [Operator name], [Postal address] ("we"). We decide how the personal data described here is used. Write to privacy@claron.app about anything in this policy.
We collect as little as the product needs to work, we do not sell or rent personal data, we do not show advertising, and the website has no analytics or tracking.
Your images
Claron processes your photographs on your own computer. They are never uploaded to us or to anyone else.
Buying a licence
Purchases are handled by Polar (polar.sh), which sells Claron to you as merchant of record. Polar collects your payment and billing details, handles tax and refunds, and issues your licence key, under its own privacy policy. We never see your card details.
From Polar we can see your email address, your name if you gave one, your licences, their status and the computers they are active on. We use these to give you support and to manage licences.
Activating and checking a licence
When you activate a licence, and when Claron starts afterwards, the application sends to our licence service: the licence key, an identifier created at random on your computer when you activate, your computer's name as set in macOS (so that you can tell your computers apart on your account page), and the version of Claron. Our licence service passes these to Polar, which records the activation. Nothing about how you use Claron is sent.
This is necessary to provide the licence you bought. The activation stays in Polar for as long as the licence exists or until you remove that computer.
Your account page
To sign in we email a six-digit code to the address you enter, and only if that address has bought a licence. We store the code hashed, for fifteen minutes. Signing in sets one cookie, claron_portal, which keeps you signed in for twelve hours; it cannot be read by scripts on the page and is used for nothing else.
Writing to support
When you write to us through the site's support form, by email, or from inside the application, we keep your email address, your name if you give it, your message, any licence key you include, and our replies, so that we can answer you and keep track of the conversation.
From inside the application you can also attach diagnostics: the version of Claron and of macOS, whether a licence is active, warnings and errors from the application's log for the last two weeks, and its latest lines. The application shows you exactly what will be attached before you send it, and you can leave it out. Paths in the log begin at your home folder, shown as ~, so your account name is not included.
To sort incoming messages, the text of your message is sent to TypeSafe, whose model classifies it: what kind of request it is, how urgent, which platform, and whether it contains something sensitive. Before it is sent, licence keys, card numbers, tokens and passwords are removed from it. Your email address, name and diagnostics are not sent. The result only orders our inbox; it decides nothing about you.
Our replies are sent by Resend, which tells us whether each one was delivered.
[Retention: state how long support conversations are kept after the last message, and that you delete them on request.]
Updates
When it starts, the application asks whether a newer version exists. That request carries nothing about you beyond what any request to a website does: your IP address and the version of Claron, which [the update host] receives.
Keeping the service safe
To stop the forms and sign-in being flooded, we count requests per IP address and per email address, and delete the counts after a day. The support form and the code request are protected by Cloudflare Turnstile, which checks that a person is sending them.
Our servers record what each request did — which kind of request, whether it succeeded, how long it took — so that we can find faults. These records do not contain your email address, your messages or your licence key, and Cloudflare keeps them for a few days.
On your Mac
The application keeps a log of what it did in ~/Library/Logs/Claron for two weeks. It stays on your computer unless you choose to send it to us.
It also keeps measurements of the frames you open — where their stars are, how they align — in a cache folder, so that opening the same frames again is quick. The cache never leaves your computer.
Who processes data for us
Cloudflare (hosting, databases, email routing, Turnstile and server logs), Polar (sales, licences and the account page's licence data), Resend (sending email) and TypeSafe (sorting support messages). Each processes data only to provide its service to us. Some of them are outside your country, including in the United States; where the law requires it, transfers are covered by the safeguards those providers offer.
Your rights
You can ask us for a copy of the personal data we hold about you, to correct it, to delete it, or to stop using it, by writing to privacy@claron.app. Some data has to be kept while a licence is active or where the law requires. You can also complain to the data protection authority where you live; in Japan, the Personal Information Protection Commission.
Where the law asks for a legal basis: licence and purchase data is needed to perform our contract with you; support data and security records serve our legitimate interest in helping you and keeping the service working; diagnostics are sent only with your consent, given each time you send them.
Children
Claron is not directed at children, and we do not knowingly collect their data.
Changes
When what we collect changes, this policy changes with it, and the date at the top changes. Significant changes are announced on the site.