Privacy policy

Rollcage is built to keep your work on your Mac. This policy explains the small amount of personal data involved in selling and licensing it. Rollcage is provided by Nicolae Maties (“we”), the controller of this data. Contact: support@rollcage.app.

The Rollcage app

• Snapshots, settings, the activity log and the Guard’s records of blocked actions are stored only on your Mac, in ~/Library/Application Support/Rollcage. We never receive them.
• The app does not include analytics, crash reporting or advertising, and does not read the contents of your files except to copy, compare and restore them locally.
• The trial start date and your licence key are kept in your Mac’s Keychain.
• When you activate a licence, the app sends your licence key, your Mac’s name and a one-way hashed identifier of the Mac (not its serial number) to http://localhost:3000/api/license/activate. We store the name, identifier and activation dates in our licence database so a key can be used on at most 3 Macs. Removing the licence from a Mac deletes its entry.
• Every few days the app sends the key and the hashed identifier to http://localhost:3000/api/license/check to confirm the licence is still active on that Mac. The key contains your email address and a purchase reference. Our hosting provider sees your IP address for these requests.

Buying a licence

Payments are handled by Stripe. Stripe collects your name, email, billing address and payment details under its own privacy policy; we never see your full card number. We receive your name, email, country and the purchase details so we can issue your licence, provide support and keep tax and accounting records. We store your email and purchase reference next to your licence key in our licence database.

We email your licence key using Resend, which processes your email address only to deliver that message.

This website

The site is hosted by Vercel, which keeps standard server logs (IP address, browser, pages requested) for security and reliability. We don’t use advertising or tracking cookies. Stripe sets its own cookies on the checkout page to prevent fraud. Fonts are loaded from Google Fonts, which receives your IP address when the page loads.

Why we use your data

• To sell you a licence and deliver it (performance of a contract).
• To keep records the law requires, such as invoices and tax records (legal obligation).
• To prevent fraud and keep the site and licence checks secure (legitimate interests).

How long we keep it

Purchase records are kept for as long as tax law requires, currently six years in the UK. Server logs are kept for a short period by our hosting provider. You can ask us to delete anything we don’t have to keep.

Your rights

Under UK and EU data protection law you can ask to see, correct, delete or export your data, and object to or restrict how we use it. Email support@rollcage.app. You can also complain to the UK Information Commissioner’s Office (ico.org.uk) or your local data protection authority.

International transfers

Stripe, Vercel, Resend and Google may process data in the United States and other countries. They use safeguards recognised by UK and EU law, such as standard contractual clauses.

Changes

If we change this policy we’ll update the date above, and for significant changes we’ll say so on this site.