Privacy, without surprises.

This policy covers the SpaceMachine Mac app, website, account service, payments, and customer support. It explains what information we use, why we use it, and the choices available to you.

Backup and offload data is handled by the Mac app, not uploaded through the SpaceMachine website or account service. The website and account service do not receive your recovery words, file contents, file names, source paths, or private backup records. Technical storage-protection and metadata boundaries are reviewed for each release.

To connect the Mac app to your account, we use a one-way account identifier, a separate short-lived login proof, device identifier, app version, connection status, protected-data total, estimated monthly cost, timestamps, and security nonces. These details let us show the correct account and prevent replay or fraudulent sign-in.

Like most online services, our servers receive connection information such as IP address, browser or device type, requested page, request time, and security events. We use it to deliver the site, distinguish people from crawlers and our own tests, diagnose faults, prevent abuse, and protect accounts. Exact addresses used for website measurement are encrypted at rest and restricted to authenticated administrators. Collected request history, including its one-way network identifier, country and network-provider context, page, time, and traffic classification, has no automatic expiry.

On public information pages, SpaceMachine counts document requests, classifies likely people, crawlers, automation, and our own activity, and derives country and network-provider context locally from the request address. In-browser measurement adds anonymous page views, active reading time, scroll depth, named button and link choices, coarse browser and screen class, language, time zone, referral hostname, campaign labels, and page-performance signals. Active attention, cursor movement, and clicks are reduced directly to coarse full-page cells; we never store a raw cursor trail, keystrokes, form contents, exact referrer URLs, or precise location. Account, login, administrator, support-form, API, and administrator preview routes are excluded. Collected requests, encrypted exact addresses, browser sessions and events, daily totals, presence records, and aggregated heatmap cells have no automatic expiry so long-term operational, security, and product patterns remain available. Global Privacy Control and Do Not Track disable this measurement. Country and network lookup uses locally hosted DB-IP data.

Stripe processes checkout and card details. SpaceMachine receives transaction identifiers, customer and billing details supplied for the purchase, totals, taxes, payment status, receipts, refunds, and disputes. We do not receive or store your full card number or card security code.

We use information to provide secure account access, display Credits and runway, operate and improve the service, process purchases, provision storage, prevent fraud, respond to support requests, maintain records, and meet legal obligations. We do not sell personal information or use it to build advertising profiles.

We share only what is needed with infrastructure hosting, payment, email, security, support, and storage providers. We may also disclose information when required by law, to protect customers, or to defend legal rights. Providers are permitted to use the information only for their own stated services and legal duties.

SpaceMachine is operated from Switzerland. Website infrastructure is hosted in Germany, and providers such as payment, email, and distributed storage services may process limited information in Switzerland, the EEA, the United Kingdom, the United States, or other countries where they operate. We use appropriate contractual and technical protections where required.

One-time login codes and account sessions expire automatically because they are access credentials, not website measurement. Collected website analytics data has no automatic expiry: this includes encrypted exact addresses, pseudonymous request history, browser sessions and events, daily presence and totals, and aggregated page heatmaps. Account and support information is kept while the service is active. Purchase, accounting, refund, dispute, and legal records may be kept for the period required by law.

SpaceMachine uses only essential cookies needed for secure account sessions. Roadmap voting stores one random identifier in your browser so you can add or remove your votes; the server keeps only its one-way digest. Public website measurement uses a random anonymous visitor identifier that rotates after 90 days and a tab-session identifier; both are one-way hashed before storage. We do not use advertising cookies or third-party analytics cookies. You can clear these identifiers through your browser settings.

We use encrypted transport, short-lived one-time links, secure session cookies, private service networks, signed payment events, access controls, and release-tested storage safeguards. No system is completely risk-free, so you should also protect your Mac and keep your SpaceMachine recovery words private.

You may ask whether we hold personal information about you and request access, correction, deletion, restriction, objection, or a portable copy where applicable. We may need to verify your identity, and some payment or legal records cannot be deleted immediately. Contact us using the address below.

Where a legal basis is required, we process information to provide the service you requested, for legitimate interests such as security and reliability, to comply with legal obligations, or with consent where the law requires it. This policy is written with the Swiss Federal Act on Data Protection in mind; additional local rights may apply.

We may update this policy when the service or legal requirements change. The effective date above will be updated for material changes. SpaceMachine is operated by Swissline Consulting in Switzerland. Privacy questions and rights requests can be sent through the private support form.