Back to Volumora

Legal

Privacy Policy

Effective

Volumora is built to analyze your Mac without sending your files anywhere. This policy explains the small amount of data that does leave your Mac, which is only what is needed to sell and activate a license, and what this website does when you visit it.

Who is responsible

Volumora is made and sold by Ilyas Abdulkadir, an individual developer based in Portugal ("we", "us"). We are the controller for the data described here, except where Polar or Cloudflare act on their own behalf as described below. Contact us at support@volumora.app about anything in this policy.

What stays on your Mac

Scanning, the storage map, search, duplicate hashing, storage history, cleanup recommendations, app leftover discovery and system monitoring all run on your Mac. File names, paths, contents, hashes and measurements are never uploaded. Volumora contains no analytics or advertising SDK and does not require an account. Deleted items go to the macOS Trash.

What the app sends to activate a license

The app connects to the internet only to activate, periodically validate and deactivate your license. These requests contain:

  • Your license number.
  • A device label made from the first eight characters of a random installation ID that Volumora creates when it is first used. It is not your Mac's serial number or hardware ID.
  • The activation ID returned when you activated, for validation and deactivation.

Where activation requests go

Licenses are issued and checked by Polar (polar.sh), the payment platform that sells Volumora. The app sends activation requests directly to Polar's license API. If that API cannot be reached from your network, the app sends the same request to our relay on Cloudflare, which forwards it to Polar and does not store it.

To prevent abuse, our license service keeps a keyed hash of the requesting IP address for a few minutes to enforce rate limits. The raw IP address is not stored and the record is deleted automatically.

If we issued your license directly instead of through Polar, our license database also stores your email address, your name if you gave it, the related order, a keyed hash of the license number and of each device ID, the app version, the macOS platform and activation dates.

Purchases

Polar acts as merchant of record: it processes your payment, collects your name, email address, billing details and payment information, calculates tax and issues your receipt and license. Polar handles that data under its own privacy policy at polar.sh/legal/privacy-policy. We never see your card details.

Polar notifies our license service of orders, refunds and disputes. For the launch offer we record the order ID, the discount used and the redemption and refund dates so the site can show how many launch seats remain. Checkout links carry the page you clicked from (utm_source and utm_medium) and your language; they contain no personal data.

This website

volumora.app sets no cookies and runs no analytics, advertising or third-party tracking scripts. Fonts and images are served from our own domain. The pricing section fetches the number of remaining launch seats from our license service; that request carries no identifier.

The site is hosted on Cloudflare. Like any web host, Cloudflare processes your IP address and request details (such as the page requested, browser and time) to deliver the site, protect it from attacks and produce aggregate traffic statistics. We use those logs only for operating and securing the site.

Email

If you email support@volumora.app, we use your message and address to answer you, deliver or recover your license and process refunds.

Legal bases

Where the GDPR or similar laws apply, we process this data to perform our contract with you (selling, delivering and activating your license and handling refunds), for our legitimate interest in keeping the service secure and preventing license abuse, and to meet legal obligations such as tax and accounting rules.

Where data is stored and for how long

Our license database runs on Cloudflare D1 restricted to the European Union jurisdiction. Polar and Cloudflare may process data in other countries, including the United States, under the transfer safeguards they offer, such as the EU Standard Contractual Clauses.

Rate-limit records are deleted within minutes. Order and license records are kept while your license exists and for as long as needed to handle refunds, disputes and legal record-keeping. Support emails are kept for as long as needed to help you. You can ask us to delete your data at any time; deleting license records means the license can no longer be validated.

Your rights

Depending on where you live, you can ask us to access, correct, delete, restrict or export your personal data, and object to our processing of it. Email support@volumora.app and we will answer within one month. You can also complain to your local data protection authority.

Children

Volumora is not directed at children under 16, and we do not knowingly collect their data.

Changes

If we change this policy, we will update it on this page and change the effective date.