CosmilCosmil is built around a simple idea: your files are none of our business. This policy explains the small amount of data we do handle, why we handle it, and who touches it along the way. The short version — we collect only what's needed to sell you a license, deliver it, and support you afterward. We never sell or rent your data to anyone.
What the app collects: nothing
The Cosmil application does not collect any information about how you use it. No telemetry, no analytics, no crash reporting that phones home. The contents of your files, the folders you browse, the servers you connect to — none of it ever leaves your Mac.
The app makes network requests for exactly two reasons:
- License verification. When you activate Cosmil,
it contacts our server to confirm your license key is valid and
to send your installation of Cosmil an activation receipt.
This request includes your:- Cosmil License Key
- Hardware ID — Used to ensure licenses aren't abused
- Update checks. The app periodically asks our
server whether a newer version is available so it can offer you
the update.
This request includes your:- Architecture (Apple Silicon or Intel)
- Current Cosmil Version
Neither request includes anything about your files or how you use the app.
What the website collects
Analytics
We use Rybbit, a privacy-focused analytics service, to understand how people find and use this website — which pages get visited, roughly where visitors come from, and what devices they use. Rybbit does not use cookies and does not track you across other websites; the data we see is aggregated and anonymized.
Purchases
When you buy a license, we keep your email address, the date of purchase, and the license key(s) issued to you. We need this to verify that you own Cosmil, deliver your license, and provide you with updates and support. We retain it for as long as your license is active, or until you ask us to delete it.
Payments
Payments are processed by Stripe. Your card number, expiration date, and billing address go directly to Stripe — we may retrieve this info (we cannot see your full card number or your card's CVC/expiration date) but never store it. Stripe's handling of your payment details is governed by Stripe's privacy policy.
The roadmap board
The roadmap board lets anyone vote on feature requests and suggest new ones without an account. Reading the board stores nothing on your device and sends us nothing.
The first time you vote or submit a request — and not before — we set a single cookie holding a random identifier. It exists only so the board knows which requests you've already backed and so you can take a vote back. It isn't tied to your name, your email, your purchase, or anything you do on the rest of the site, and it is never used for advertising or shared with anyone.
To stop one person stuffing the ballot, we also need to recognize repeat activity from the same connection. We do that without keeping your IP address: it is combined with a secret value and hashed, and only that hash is stored. It cannot be turned back into your address, and we never write the address itself to our database or our logs.
If you submit a request, we keep what you typed. The email address and display name on that form are both optional: the email is used only to tell you if the feature ships, and the name only appears on the board if we approve your request and keep it. Leave them blank and the submission is entirely anonymous.
Support
If you email us for help, we'll have your email address and whatever you include in the correspondance. We keep support correspondence so we can follow up and improve the app.
The services we rely on
This is the complete list of third parties that may process data on our behalf:
- Stripe — payment processing
- Rybbit — website analytics
- Resend — transactional email (license delivery, receipts)
- Cloudflare — website hosting, and the spam check on the roadmap submission form
Each receives only what it needs to do its job. Beyond these providers, we share personal data only if we're legally required to.
Your rights
Email us at [email protected] and we will:
- Send you a copy of the data we hold about you
- Correct anything that's inaccurate
- Delete your data entirely
Note that deleting your purchase records also deletes our ability to verify your license, so we'll confirm with you before removing anything you might still need.
Changes to this policy
If we change this policy, we'll update it here along with the date at the top. We won't weaken the core commitment — the app not collecting usage data isn't a policy detail, it's how Cosmil is built.
Contact
Questions about any of this? Email [email protected].