Privacy Policy

This page explains what personal data this website (cupertina.com) and the apps I make collect, why, and your rights under the EU General Data Protection Regulation (GDPR).

1. Who is responsible

The data controller is Besian Shala (Italy), the developer behind this site and its apps. For any privacy request, write to contact@cupertina.com.

2. This website

No tracking, no ad cookies

This website does not use advertising or tracking cookies, and there is no cookie banner because no consent-requiring cookies are set. We use Vercel Web Analytics, which counts anonymous page views without cookies and without building a profile of you.

Getting in touch

There is no contact form on this site: you write to us by email, directly from your own mail client. We use the address and message you send only to read and reply to you.

Server logs

This site is hosted by Vercel, which may keep standard technical logs (IP address, timestamp, requested page) for security and to keep the site running. These are not used to identify or profile you.

3. The apps

The apps I make run entirely on your Mac. They do not transmit your files, activity, or any personal data to us or to any third party. Where an app needs access to your data, it works locally on your device.

What each app currently sold through this site touches on your Mac:

Timse

Timse keeps sessions and goals in a local container on your Mac, shared only with its own widgets. The only network connections are the licence check and the update check.

Toggle Music

Toggle Music reads your Apple Music library through Apple's MusicKit framework only to display it, and plays it by asking the Music app on your Mac to do so — which is why macOS asks your permission for Toggle Music to control Music. Nothing about your listening leaves your Mac through us. If you connect Spotify, it signs you in through your browser and keeps the resulting authorization token in the macOS Keychain on your Mac; it browses your library through Spotify's API and plays through the Spotify desktop app. Only the music service you connect receives this data, never us.

To let you know when a new version is available, an app periodically requests a small version file published on GitHub Releases. This request is anonymous and does not contain personal information beyond what any standard web request carries. To validate a paid license, the app sends your license key to our payment provider's licensing service — see section 4.

4. Purchases & license validation

When you buy one of my apps, payment is handled by Lemon Squeezy, which acts as the merchant of record (the seller) and as an independent data controller for the transaction. They collect the information needed to process your payment and issue an invoice (name, email, billing country, payment details). We receive only the data necessary to deliver your license and provide support (typically your email and order reference). When an app checks that your license is valid, it sends your license key to Lemon Squeezy's licensing service. Please refer to Lemon Squeezy's own privacy policy for details.

5. Legal bases (GDPR)

• Performance of a contract: to sell the apps, deliver and validate your license, and provide support (Art. 6(1)(b)).
• Legitimate interest: to reply to messages you send us, and to keep the website and update service secure and functioning (Art. 6(1)(f)).

6. How long we keep data

Emails you send are kept only as long as needed to handle your request and any follow-up. Purchase and invoicing records are kept as required by Italian tax law (generally 10 years). You can ask us to delete data we control that is not subject to a legal retention obligation.

7. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and the right to data portability. To exercise any of these, write to contact@cupertina.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, garanteprivacy.it).

8. Changes

We may update this policy. The "last updated" date above always reflects the current version.