Privacy Policy

Last updated: November 15, 2026

This policy explains which personal data we process when you visit ploibar.app, use the Ploibar app, or buy a subscription, and which rights you have under the EU General Data Protection Regulation (GDPR).

1. Controller

Stefan Bauer
Bajuwarenhof 31
85459 Berglern
Germany

Email: [email protected]

2. In short

  • The public website sets no cookies and uses no advertising or third-party tracking. We count visits with a self-hosted, cookieless analytics tool. Only when you sign in to your account do we set one strictly necessary session cookie.
  • The app talks directly to Ploi from your Mac. Your Ploi API token and your server data never reach us.
  • To unlock the app, you sign in to your ploibar.app account. We store your account, the Macs you signed in on, and the purchase details Paddle sends us.

3. Hosting and server logs

The website and the update feed run on a server provided by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, which processes data on our behalf under a data processing agreement (Art. 28 GDPR). For every request, the server records your IP address, date and time, the requested address, the referring page, your browser's user agent and the response status. We need this to deliver the website and the update feed and to keep them secure. The legal basis is our legitimate interest (Art. 6 (1) (f) GDPR). The logs are deleted after 14 days at the latest, unless we need them longer to investigate a specific security incident.

All requests to ploibar.app and its subdomains, including those from the app, pass through the network of Cloudflare (except the analytics at t.ploibar.app, which go directly to our server, see section 4), Inc., 101 Townsend St, San Francisco, CA 94107, USA, which delivers the website, protects it against attacks and processes the request data listed above on our behalf under a data processing agreement. This can involve processing in the United States. The transfer is covered by the EU-U.S. Data Privacy Framework, under which Cloudflare is certified, and by the EU Standard Contractual Clauses. The legal basis is our legitimate interest in delivering the website quickly and securely (Art. 6 (1) (f) GDPR).

4. Analytics

To understand how many people visit the website and which pages they read, we use Umami, an open source analytics tool that we run on our own server at t.ploibar.app. No data is passed on to third parties. Umami sets no cookies and does not store your IP address. It records the page you visit, the referring page, the type of browser, operating system and device, the screen size, the language, and the country, which it derives from your IP address. It counts visits with an identifier that is calculated from these details and changes regularly, so you cannot be recognised over a longer period.

The legal basis is our legitimate interest in improving the website (Art. 6 (1) (f) GDPR). If your browser sends a "Do Not Track" signal, Umami does not record your visit. You can also object at any time by email, or block t.ploibar.app with a content blocker.

5. Cookies and external resources

The public pages of the website set no cookies and load their fonts, styles and scripts from our own server.

When you sign in, register, or reset your password, we set a session cookie (ploibar-session) and a security cookie against cross-site request forgery (XSRF-TOKEN). They are strictly necessary to keep you signed in and to protect your account, so they need no consent (§ 25 (2) no. 2 TDDDG). They expire after two hours without activity. If you choose "Stay signed in", we also set a cookie that keeps you signed in for up to 400 days (remember_web_…); signing out deletes it. The server keeps the session, with your IP address and browser user agent, until it expires and deletes it within a day after that. The legal basis is the performance of the contract (Art. 6 (1) (b) GDPR) and our legitimate interest in secure sign-ins (Art. 6 (1) (f) GDPR).

The only external resource is the Paddle checkout described below, which loads only when you start a checkout on your account page.

6. Your account

For your account we store:

  • your name, email address, a hash of your password, and whether you confirmed your email address,
  • for each Mac you sign in on: a hashed device ID (see section 8), the Mac's name, the app version, when the app last checked in, and a hash of the device token the app uses.

We use this to provide your account, to unlock the app on your Macs, to enforce the number of Macs per subscription, and to send you emails needed for your account, such as the confirmation link and password resets. The legal basis is the performance of the contract (Art. 6 (1) (b) GDPR). You can remove a Mac or delete your account at any time in your account settings. When you delete it, we close your account and sign out all your Macs immediately. You can no longer sign in, and you can sign up again with the same address. We keep the closed account (name and email address) together with your purchase records, as described in section 7.

We send these emails through Resend (Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA), which processes your email address, your name and the content of the email on our behalf under a data processing agreement. Resend stores this data in the United States. The transfer is covered by the EU-U.S. Data Privacy Framework, under which Resend is certified, and by the EU Standard Contractual Clauses.

7. Purchases through Paddle

Subscriptions are sold by our reseller Paddle.com Market Limited, Judd House, 18-29 Mora Street, London EC1V 8BT, United Kingdom ("Paddle"), as Merchant of Record. When you start a checkout on your account page, your browser loads Paddle's checkout from Paddle's servers, which transmits your IP address to Paddle. Paddle processes the data you enter at checkout, including your payment details, as an independent controller under its own privacy policy. The United Kingdom is covered by an adequacy decision of the European Commission.

After a purchase, Paddle sends us the following data:

  • your name and email address and Paddle's customer ID,
  • your plan, the subscription status, trial and billing dates, and cancellations,
  • the amount, currency, status and date of each payment.

We never receive your full payment details.

We use this data to manage your subscription and licence, to answer support requests, and for our accounting. The legal bases are the performance of the contract (Art. 6 (1) (b) GDPR), our legal obligations under tax and commercial law (Art. 6 (1) (c) GDPR), and our legitimate interest in defending legal claims (Art. 6 (1) (f) GDPR). We keep this data, also after you close your account, as long as we need it for your subscription, for our retention duties under tax and commercial law (up to ten years), and to handle refunds, chargebacks and legal claims. If you want us to erase it sooner, email us at [email protected]; we then delete everything the law does not require us to keep.

8. The app

  • Ploi. The app connects from your Mac directly to the Ploi API, using the API token you enter. The token is stored in your Mac's Keychain. We receive neither the token nor any data about your servers or sites. Ploi processes this data under its own privacy policy, which you can find on ploi.io.
  • Trial. When you start the free trial, the app registers it with us at ploibar.app/api/license/v1/trial, sending the device ID described below and the app version. It asks again when the trial ends. We store the device ID and when we first saw it, and answer with a signed confirmation of the trial's end date. This record contains no name or email address and is not linked to an account. We keep it so that the trial runs only once per Mac, also if you delete your account; the legal basis is our legitimate interest in preventing misuse of the free trial (Art. 6 (1) (f) GDPR).
  • Signing in. To unlock the app, you sign in to your ploibar.app account in a browser window the app opens (ploibar.app/app/authorize). The app then talks to ploibar.app/api/license/v1 to sign in, to check your subscription about once a day, and to sign out. These requests send a device ID, the name of your Mac, the app version and, after sign-in, the device token. The device ID is a SHA-256 hash of your Mac's hardware ID; the hardware ID itself never leaves your Mac. We answer with a signed confirmation of your subscription status. The app stores the device token, your account's email address and this confirmation in your Mac's Keychain. The legal basis is the performance of the contract (Art. 6 (1) (b) GDPR).
  • Updates. The app checks for new versions by requesting https://ploibar.app/updates/appcast.xml, which forwards to our download storage at downloads.ploibar.app (Cloudflare R2, see section 3), and downloads updates from there. This transmits your IP address and the app version, which are processed as described in section 3. The legal basis is our legitimate interest in keeping the app up to date and secure (Art. 6 (1) (f) GDPR).
  • No tracking. The app contains no analytics, advertising or crash reporting tools.

9. Contacting us

When you email us, we process your email address, your name if you give it, and the content of your message to answer you. The legal basis is the performance of the contract or steps before entering into one (Art. 6 (1) (b) GDPR), and otherwise our legitimate interest in answering your request (Art. 6 (1) (f) GDPR). We delete the correspondence once it is no longer needed, unless we must keep it by law.

10. Recipients

Apart from Paddle, our hosting provider, Cloudflare and Resend for account emails, who act on our behalf, we do not pass your data on, unless we are legally obliged to. We do not sell personal data.

11. Your rights

You have the right to:

  • access your personal data (Art. 15 GDPR),
  • have it corrected (Art. 16) or erased (Art. 17),
  • restrict its processing (Art. 18),
  • receive it in a portable format (Art. 20).

To use these rights, email us.

Right to object: Where we process your data based on our legitimate interest (Art. 6 (1) (f) GDPR), you can object to the processing at any time for reasons arising from your particular situation (Art. 21 GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the EU member state where you live or work.

12. Other information

You are not obliged to provide personal data. Without it, however, we cannot create your account, sell you a subscription, unlock the app or answer your messages. We do not use automated decision-making or profiling (Art. 22 GDPR).

13. Changes

We update this policy when our services or the law change. The date at the top shows the latest version.