Privacy Policy

What the app downloads

The app makes three requests, all to this domain, and all of them are one-way downloads.

• /latest.json, on launch and every six hours, so the app can tell you a newer version exists.
• /revoked.json, at the same interval, the list of revoked license ids.
• /appcast.xml, on Sparkle's own schedule, if you installed from the DMG.

None of them carries your identity, your license key, a machine id or any usage data. As with any request to any website, our server sees the IP address it came from and the User-Agent, which contains the app version. Sparkle's optional system profile reporting is switched off.

What stays on your Mac

Settings, in macOS user defaults: your license key, the date you first launched the app, the battery threshold, the grace period, the automatic switch, the Wi-Fi network to rejoin, and the last copy of the revocation list.

Session records, under ~/Library/Application Support/Lidlezz/sessions/: which agent is running, which folder it runs in, how many tool calls it has made, whether it is working or idle, timestamps, and the first 80 characters of your prompt, so the panel can show you what is running. That text never leaves your Mac. It is deleted when the session ends, or after an hour at the latest, whichever comes first. You can delete that folder yourself at any time.

Run records: how long the last run held sleep off, the peak temperature it saw, and how much battery it used.

When you buy

Payment is handled by Stripe. We never see or store your card details. Stripe passes us the email address you paid with, so we can sign your license and send it. The email goes out through Resend.

We keep no customer database of our own. When you ask for a lost key, we ask Stripe whether that address has a completed purchase, and send the key again if it does.

The license id

Every license carries a short id derived from your email address with a keyed hash. It cannot be turned back into your address. If a purchase is refunded or charged back, that id is added to the public revoked.json so the app stops accepting the key. That file contains ids and nothing else. It never contains an email address, a name or an order number.

Server logs

When a request fails, our server records the error and the Stripe session id involved, so we can find the problem. Email addresses are not written to those logs.

This website

The site counts visitors with Umami, running on our own server rather than an analytics company's. It sets no cookies and stores nothing that identifies you: page views, the site you arrived from, browser, operating system, device type and country. It also counts clicks on the download and buy buttons. When you arrive from one of our social posts, the link's post tag is kept in your browser for that tab, so those clicks, and a purchase's Stripe record, can be credited to the post.

The site also runs the Meta Pixel, so we can tell whether our ads on Facebook and Instagram work. It reports page views, clicks on the download and buy buttons, and a completed purchase with its price, and Meta may set its own cookie to connect these to your Meta account. Meta handles that data under its own privacy policy; an ad or tracker blocker stops it. Fonts and images are served from this domain.

Questions and requests

Because we hold no database of our own, there is very little of yours to hold. What Stripe keeps about your purchase is covered by Stripe's own privacy policy. If you want your license id removed from the revocation list, or you have any question about this page, write to support@mail.lexproximastudios.com.

Changes

If this page changes, the date at the top changes with it.