CosmilCosmil is built around a simple idea: your files are none of our business. This policy explains the small amount of data we do handle, why we handle it, and who touches it along the way. The short version — we handle technical data to run trials, prevent abuse, manage licenses, and deliver updates, along with website, purchase, and support information described below. We never sell or rent your data to anyone.
App data: trials, licensing, and updates
The Cosmil application has no usage telemetry, analytics, or automatic crash reporting. We do not collect your file contents, browsing history within the app, or remote-server credentials. When you connect to a server or share files, data goes to the destination you choose.
The app contacts our services for these purposes:
- Free trials. When you request a trial or recover an existing trial, the app sends your Mac's hardware identifier to our server. We also receive your connection's IP address. These checks are described below.
- License verification. When you activate Cosmil,
it contacts our server to confirm your license key is valid and
to send your installation of Cosmil an activation receipt.
This request includes your:- Cosmil License Key
- Hardware ID — used to enforce activation limits
- Update checks. The app periodically asks our
server whether a newer version is available so it can offer you
the update.
This request includes your:- Architecture (Apple Silicon or Intel)
- Current Cosmil Version
These requests do not include your file contents or browsing activity within the app.
Free trials and abuse prevention
Your hardware identifier is a technical identifier associated with your Mac. Our server receives it and your IP address, then transforms each into a cryptographic hash using a server-held secret before storing them in the trial database.
We use the hardware-identifier hash to enforce one trial per Mac. The IP-address hash limits excessive new trial activations from the same connection; a shared IP address does not mean everyone using it is the same person. We also store a random trial ID, start and expiry dates, and the date and count of any extensions. The signed activation receipt returned to your Mac includes its hardware identifier and trial dates.
These hashes let us recognize repeat devices or connections, so they are pseudonymous identifiers, not anonymous data. We use them solely to administer trials and prevent abuse.
Trial records, including both hashes, remain after the trial expires and currently have no fixed deletion date. Trial expiry or uninstalling the app does not delete these server records. You can request deletion as described under "Your rights" below.
An internet connection is required to activate a trial. If a trial is incorrectly blocked, contact support@cosmil.app so we can review it.
Where applicable data protection law requires a legal basis, we process information needed to provide your trial or license to perform our agreement with you. We also process identifiers and connection data for our legitimate interests in enforcing trial and activation limits and protecting our services from abuse.
What the website collects
Analytics
We use Rybbit, a privacy-focused analytics service, to understand how people find and use this website — which pages get visited, roughly where visitors come from, and what devices they use. Rybbit does not use cookies and does not track you across other websites; the data we see is aggregated and anonymized.
Purchases
When you buy a license, we keep your email address, the date of purchase, and the license key(s) issued to you. We need this to verify that you own Cosmil, deliver your license, and provide you with updates and support. We retain it for as long as your license is active, subject to deletion requests and any applicable legal retention requirements.
Payments
Payments are processed by Stripe. Your card number, expiration date, and billing address go directly to Stripe — we may retrieve this info (we cannot see your full card number or your card's CVC/expiration date) but never store it. Stripe's handling of your payment details is governed by Stripe's privacy policy.
The roadmap board
The roadmap board lets anyone vote on feature requests and suggest new ones without an account. Reading the board does not create a voter cookie. The website analytics and hosting described in this policy still apply.
The first time you vote or submit a request — and not before — we set a single cookie holding a random identifier. It exists only so the board knows which requests you've already backed and so you can take a vote back. The cookie expires after one year unless you clear it sooner. We store the identifier with your votes and submissions, including any optional contact details you provide. We do not use it for advertising or to track you across other websites.
To stop one person stuffing the ballot, we also need to recognize repeat activity from the same connection. We combine your IP address with a secret value and hash it before storing it with roadmap votes and submissions. Those records contain the hash rather than the raw IP address.
If you submit a request, we keep what you typed. The email address and display name on that form are both optional: the email is used only to tell you if the feature ships, and the name only appears on the board if we approve your request and keep it. You can leave both blank; the submission still has a voter identifier and an IP-address hash.
Support
If you email us for help, we'll have your email address and whatever you include in the correspondence. We keep support correspondence so we can follow up and improve the app.
The services we rely on
We use the following services to operate Cosmil and this website:
- Stripe — payment processing
- Rybbit — website analytics
- Resend — transactional email (license delivery, receipts)
- Cloudflare — website hosting, routing requests to our backend services, and security and spam protection, including the roadmap submission form
- Supabase — backend services, database hosting, and file storage and delivery for downloads and updates, including license, trial, purchase, and roadmap records
Each receives only what it needs to do its job. Beyond these providers, we share personal data only if we're legally required to.
Your rights
Email us at support@cosmil.app to request:
- A copy of the personal data we hold about you
- Correction of inaccurate information
- Deletion of your personal data
- Restriction or portability of your data, where applicable
Note that deleting your purchase records also deletes our ability to verify your license, so we'll confirm with you before removing anything you might still need.
Changes to this policy
If we change this policy, we'll update it here along with the date at the top. We won't weaken the core commitment — the app not collecting usage data isn't a policy detail, it's how Cosmil is built.
Contact
Questions about any of this? Email support@cosmil.app.