Privacy

Privacy policy

Draft. To be reviewed before launch, and the licensing section confirmed against the shipping app. Last updated: 4 October 2026.

Short version: Nightlid doesn’t collect analytics, doesn’t track you and has no account. It goes online only to check for updates and to validate your license. This website sets no cookies.

Who we are

Nightlid is made by Jiří Beneš, a sole trader in the Czech Republic (Company ID / IČO: [to be added], address: [to be added]), the controller for the personal data described here. Contact: [email protected].

The app

Stays on your Mac

Settings, session history (times, battery level, thermal state, the reason a session ended), the list of watched processes and the agent activity it receives from hooks (agent name, session ID, working directory) stay on your Mac in ~/Library/Application Support/Nightlid and the app’s preferences. Nothing of this is sent anywhere.

Update checks (Sparkle)

Nightlid uses the open-source Sparkle framework. About once a day (you can turn automatic checks off in Settings → General) the app downloads https://nightlid.app/appcast.xml over HTTPS. The request contains what any web request contains: your IP address and a user agent with the app’s name and version and Sparkle’s version. Sparkle’s optional system profiling is off — no hardware or macOS details are sent. When you install an update, the app downloads the new version from the same site.

License validation (Polar)

When you activate a license, the app sends to the license API of Polar (api.polar.sh), our merchant of record: the license key, a label for this Mac so you can recognise it among your up to 3 activations (e.g. its computer name), and the app version. About once a week it re-validates the key and its activation. When you deactivate a Mac, it tells Polar which activation to remove. Polar receives your IP address with these requests. No usage data, files or hardware identifiers are sent. [To be confirmed against the final licensing code before launch.]

The trial needs no account, no card and no network connection.

Buying

Purchases are handled by Polar as merchant of record: Polar is the seller of record, processes your payment (via Stripe), calculates taxes and issues the receipt. Polar shares with us what we need to provide your license and support: your name, email address, country, the order and the license key. We never see your card details. See Polar’s privacy policy.

We use your email only for your purchase, license and support, and — if you have an update period — a reminder before it ends. No newsletters unless you opt in.

This website

The site is static and hosted on Cloudflare Pages. It sets no cookies, has no analytics or tracking scripts and loads nothing from third parties. Cloudflare processes your IP address and request data to deliver the site and protect it from abuse (see Cloudflare’s privacy policy). A light/dark theme choice, if you make one, is stored only in your browser’s local storage.

Support emails

If you write to us, we keep the conversation to help you and for our records.

Legal basis and retention

We process purchase and license data to perform the contract with you (Art. 6(1)(b) GDPR) and keep accounting records as required by Czech law (Art. 6(1)(c)); update checks and abuse protection are based on our legitimate interest in delivering and securing the software (Art. 6(1)(f)). Order records are kept as long as accounting and tax law require; support emails for up to 3 years after the last contact.

Your rights

You can ask for access to, correction, deletion or a copy of your data, object to processing, or restrict it — email us. You can also complain to the Czech data protection authority, the Úřad pro ochranu osobních údajů (uoou.gov.cz), or the authority in your country.

Changes

We’ll post changes here and update the date above.