Privacy Policy

In short

When you buy an app, you give your purchase details to Polar, which sells it for me. The apps never send your files or anything in them. Only the data described here leaves your Mac, some of it for the United States, with the safeguards explained below.

Who is responsible

The data controller is SicDev Studio di Durante Antonio (Antonio Durante), VAT IT 04066060791, Vico 1 San Crispino, Taverna (CZ), Italy. Contact: support@sitchkit.app. There is no data protection officer: one isn’t required for this business.

Visiting this website

Cloudflare, which hosts this site, handles technical data such as your IP address, your browser and the pages you request, to deliver the pages and protect them from abuse. Legal basis: my legitimate interest (Art. 6(1)(f) GDPR). Cloudflare keeps these logs only as long as it technically needs them.

The site sets no cookies and uses no analytics. It serves its own fonts and loads nothing from Google.

Buying an app

Polar sells the apps as merchant of record, that is, as the official seller. At checkout you give Polar your name, email address, country, billing address if asked, and payment details. Polar handles the checkout, the payment and the invoice on my behalf, as my processor, under its Data Processing Addendum. For its own legal obligations as the seller, such as taxes and fraud prevention, it also acts as a controller under its own privacy policy. I never see your card details.

From Polar I receive what I need to support you: your name, email address, country, what you bought and the state of your license key. Legal basis: the contract (Art. 6(1)(b)) and tax obligations (Art. 6(1)(c)). I keep order records for 10 years, as Italian tax law requires.

Activating and using a license

When you activate a key, and about once a day after that, the app sends Polar the key, the code of this activation, a random label for your Mac (like “Mac A3F9”, never the Mac’s name) and, as with any connection, your IP address. That’s how the app checks the license and keeps it to 2 Macs.

Here too Polar works on my behalf, as my processor. Legal basis: the contract (Art. 6(1)(b)). The data is kept as long as the license exists, then with the order records.

Looking for updates

Once a day the app downloads the list of versions from sitchkit.app, through Cloudflare, which sees your IP address and the app’s name and version. Legal basis: the contract, since updates are included in the price (Art. 6(1)(b)).

Writing to me

If you write to support@sitchkit.app, Cloudflare forwards the email to my mailbox at Google (Gmail), where I read and answer it. I use your email address and your messages only for that. Legal basis: the contract, or my legitimate interest in answering you (Art. 6(1)(b) and (f)). I keep support emails for up to 2 years after our last exchange.

What stays on your Mac

Everything else: the files and screenshots Redatch analyzes, what it finds in them, the redacted copies, your settings, the free-trial counter and the license key, which is kept in your Keychain. Neither I, nor Polar, nor Cloudflare receive any of it.

To offer to redact a screenshot you copy, Redatch checks what kind of content the clipboard holds, never the content itself. It reads the image only once you click Redact or Take More (after Take More, also the screenshots you copy next, until you redact or discard them), then puts the redacted copies in their place. You can turn this off in the app’s Settings.

Who receives the data

Polar Software, Inc. (Delaware, USA): my processor for checkout, payments, invoices and license keys, and a controller only for its own legal obligations as the seller. Stripe: processes payments for Polar, as its sub-processor. Cloudflare, Inc. (USA): my processor for hosting this site, the update list and email forwarding. Google (USA): my support mailbox.

I don’t sell your data or share it with anyone else.

Transfers outside the EU

Polar, Stripe, Cloudflare and Google are based in the United States, so the data above may be processed there. Each transfer rests on a safeguard the GDPR provides for.

Cloudflare, Stripe and Google take part in the EU-U.S. Data Privacy Framework, which the European Commission found adequate in its decision of 10 July 2023 (Art. 45 GDPR). Polar is bound by the Standard Contractual Clauses adopted by the Commission (Decision 2021/914, module 2), included in its Data Processing Addendum (Art. 46 GDPR).

You can ask me for a copy of these safeguards at support@sitchkit.app.

Your rights

Under Articles 15 to 22 GDPR you can ask me to access your data, correct or delete it, restrict its use, object to it and receive it in a portable format. Write to support@sitchkit.app: I’ll answer within a month.

You can also complain to the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or to the authority of the country where you live.

If you don’t provide the data

Purchase and license data are needed to buy and use a license: without them, you can’t buy. The website and the free trial don’t ask you for any personal data.

Automated decisions

I make no automated decisions about you and do no profiling.