Privacy
Privacy policy
Last updated:
The short version. Thin Air runs entirely on your Mac. It has no account system, does not read your files, and sends nothing anywhere unless you turn on an optional switch or buy a Pro license. This website sets no cookies and runs no analytics.
Who is responsible
Thin Air (the app, the screen saver and this website) is made and operated by [LEGAL NAME — set legal.sellerName in site.config.json], a sole proprietor based in Israel ("I", "me"). For anything about your data, write to alvolio10@gmail.com.
This website
The site is static and served by Cloudflare Pages. It sets no cookies, loads no third-party scripts, fonts or trackers, and keeps no visitor profiles. Like any web host, Cloudflare receives your IP address and browser request headers to deliver the pages and to protect the site from abuse; Cloudflare's handling of that data is described in its own privacy policy. If you save an appearance preference (light or dark) with the switch in the footer, it is stored in your browser's local storage only and never sent to me.
Links to Instagram lead to a third-party service with its own privacy terms.
The app: what stays on your Mac
- Scenes, settings and preferences are stored in your user account on your Mac. Nothing is synced by me.
- Thin Air Everywhere reflections. To reflect your desktop in the bubbles, the app asks macOS for Screen Recording permission and uses Apple's ScreenCaptureKit to read the screen, frame by frame, only while Blow bubbles is on or bubbles it left are still visible. Each frame is used for rendering and discarded. No frame, screenshot or recording is ever saved to disk, analysed for content, or transmitted. You can revoke the permission at any time in System Settings → Privacy & Security.
- No account, no sign-in, no contacts, no location, no microphone, no camera.
The app: the only connections it can make
| When | Where | What is sent |
|---|---|---|
| Update check (about once a day, and when you choose Check for Updates) | The Thin Air update feed and download host (GitHub) | A standard web request: your IP address, the app's version and your macOS version in the request headers, so the feed can offer a compatible build. Updates are delivered through the Sparkle framework and verified with a cryptographic signature. Nothing installs without your consent unless you turn on Download and install automatically in Settings → Updates. |
| Thin Air Pro: activating, checking or deactivating a license key | Lemon Squeezy's license API (api.lemonsqueezy.com) | Your license key and a random instance identifier the store assigns to this Mac. The app stores the key and that identifier in your macOS Keychain and caches the last successful check locally. The store's reply includes the status of the key; the app keeps no customer name or email. Checks run at activation, then at most once a day while you use the app. |
| Only if you turn on Share anonymous usage data (off by default) | PostHog, hosted in the European Union (eu.i.posthog.com) | A random identifier generated by the app (not tied to your hardware, Apple ID or email), a short list of coarse events such as "app opened", "studio opened" or "scene saved", the app version and your macOS version. No file names, scene contents, screen content or personal details. Turning the switch off deletes the queued events and discards the identifier. |
That is the complete list. The screen saver itself makes no connections at all.
Buying Thin Air Pro
Purchases are handled by Lemon Squeezy (Lemon Squeezy, LLC) as the merchant of record. When you buy, Lemon Squeezy collects your email address, payment details, billing country and whatever else its checkout needs, processes the payment, issues the invoice, calculates and remits VAT or sales tax, and emails you the license key. Lemon Squeezy's privacy policy governs that data. I see your order details (name, email, country, the license key and its activation count) in the Lemon Squeezy dashboard so that I can answer support requests and process refunds; I do not receive or store card numbers, and I do not add you to any mailing list.
Support email
If you write to alvolio10@gmail.com, I keep the conversation for as long as it is useful to help you and to keep a record of refunds, and then delete it. The mailbox is provided by Google.
Legal basis and your rights
Where the GDPR, the UK GDPR or Israel's Protection of Privacy Law apply, the basis for processing is: performing the contract with you (license checks, purchases, support), my legitimate interest in keeping the software secure and up to date (update checks, abuse protection), and your consent for optional usage data, which you can withdraw at any time in the app. You can ask me to access, correct, export or delete the little data I hold about you by email. If you are in the EU/EEA or the UK you can also complain to your local data protection authority.
Children
Thin Air is suitable for all ages and collects no personal data from anyone by default. Pro purchases are made through Lemon Squeezy, whose terms require buyers to be adults or to have a parent's permission.
Changes
If this policy changes, the new version is published here with a new date. Changes that affect what the app sends will also be mentioned in the release notes of the update that introduces them.