ShowTake is made by ShowTake ("we", "us"). This policy covers the ShowTake Mac app, its MCP server, this website (showtake.app) and the license service (api.showtake.app).
Controller: ShowTake. Contact for anything in this policy: team@showtake.app.
The short version: your recordings, screenshots, flows, prompts and source code stay on your Mac. We never receive them. We process only what we need to sell and license the app, deliver updates and, unless you opt out, count anonymous usage to improve it. We do not sell personal data and we do not use it for advertising.
What stays on your Mac
Everything ShowTake films or creates: raw recordings, event logs, flows, renders, exports, project settings, the names and bundle ids of the apps you film, and anything your coding agent sends to ShowTake's tools. Rendering happens on your Mac. The MCP server talks only to the ShowTake app on the same Mac, over a local socket that other users cannot open.
What the app sends, and why
| Data | When | Purpose | Can I turn it off? |
|---|---|---|---|
| License key, a one-way hash of your Mac's hardware id, the Mac's name, app version | Activating a license, about once a day while a paid license is active, and when you remove a Mac | Check the license and the number of Macs using it; list your Macs in the license manager | Only by not using a paid license (the free version sends nothing for licensing) |
| A request for the update feed (your IP address and the app's name and version, as in any web request) | About once a day, and when you choose "Check for updates" | Offer the right update | Yes: turn off "Check for updates automatically" in Settings |
| A random install id, a random id for each app session, and usage events: app launched (first launch or not; installed with Homebrew, a browser download or the install script), app quit (session length), update installed (old and new version), setup steps viewed, completed or skipped, permissions requested and whether Accessibility and Screen Recording are allowed, the name and version of the coding agent connected (for example "claude-code 2.1"), MCP tool called (tool name, success, error code, duration), setup check results (which checks failed), project prepared or created (iOS or macOS, success, error code), take started/ended (success, issue codes, retake count), flow replayed, render and export (preset, success, error code), Pro feature requested on the free plan (tool and preset), checkout link created, checkout completed and license activated (plan), plus the app and macOS version | While you use the app | Learn which features work, where setup gets stuck and which fail | Yes: Settings → Privacy → "Share anonymous usage data and crash reports" (on by default) |
| Crash and hang diagnostics provided by macOS (code locations as binary name + offset, exception codes, hang duration, app version) and error codes of failed updates, license checks and app start-up, with a short message from which home-folder paths, email addresses, license keys and tokens are removed | After a crash or hang (on a later launch), or when the error happens | Fix crashes, freezes and errors | Yes, same setting |
Usage events and crash reports never contain file names, file paths, app names, captions, screen content, typed text, prompts, your license key or your email. The install id is random, stored only in the app's preferences, and not linked to your license or your email. The app sends these events to our own server (api.showtake.app), which removes your IP address and adds only your country before passing them on; we do not keep IP addresses with these events.
Where installs come from. On the app's first launch only, our server also attaches a one-way hash made from a secret value, the date and your IP address (no browser or device details). Visits, downloads and agent fetches on our website get the same kind of hash. Matching the two tells us, in aggregate, which websites and campaigns lead to installs. The hash changes every day, cannot be turned back into your IP address, and is never linked to your license or email. Turning off "Share anonymous usage data" stops it.
Bug reports are sent only when you choose "Report a bug": the app opens a pre-filled email or issue form with the app's recent log (with home-folder paths, email addresses, license keys and tokens removed), which you can read and edit before sending.
Purchases
Orders are handled by our reseller, which acts as the merchant of record: it processes your payment details, billing address and tax information under its own privacy policy, and we never see your card number. From each order we keep your email address, the plan, the number of seats, the order and subscription status and dates, and the reseller's order, customer and product ids. We use them to issue and email your license key, run the license manager, answer support and meet tax and accounting duties. We store only a hash of your license key, never the key itself. For statistics we also count each paid order without any personal data: the plan, a price range, the currency, whether a discount applied and whether the checkout started in the app or on the website.
The website
The website uses no advertising or tracking cookies and stores nothing in your browser for analytics. To count visits, page views, how far down a page you scroll, which sections you see and how long you stay, download and checkout clicks, use of the free tools and errors in the site's own scripts (the message and file, with link parameters removed), the site sends anonymous events through our own server, which replaces your identity with a random-looking id made from a secret value, the date, your IP address and your browser's user agent. That id changes every day, cannot be turned back into your IP address, and is never combined with your license or email. We record the page, the referring website, campaign tags in the link (such as utm_source), your country (derived from the IP address, which itself is not stored) and your device type. If your browser sends "Do Not Track" or "Global Privacy Control", the site sends no analytics at all. We do not record your screen, mouse movements or what you type on the site.
When you download the app through the website or the install script, our server counts the download (version, how it was downloaded, the referring website and campaign tags) under the same daily id. When a program fetches the plain-text pages meant for coding agents (such as /agents.md or /llms.txt), our server counts which page was fetched and what kind of program fetched it, judged from its user agent (for example a coding agent, a search crawler or a browser).
The license manager sets one strictly necessary cookie (st_manager, HttpOnly, up to 7 days) after you sign in with an email link. Our hosting provider keeps short-lived request logs (IP address, user agent, URL) for security and to fix errors. The App Preview checker and the other free tools run in your browser; your files are never uploaded.
We send transactional email only: your license key, a new key when you ask for one, and sign-in links for the license manager. Receipts and renewal notices come from our reseller. No newsletters unless you subscribe separately.
Legal bases (EU/UK)
Licensing, purchases and support: performance of our contract with you. Tax and accounting records: legal obligation. Anonymous app usage events, crash reports and website analytics: our legitimate interest in keeping ShowTake working and improving it, with an opt-out in the app and Do Not Track / Global Privacy Control honoured on the website. Security logs: legitimate interest in protecting the service.
Service providers
We use a small number of providers to run ShowTake, each only for its part: hosting and content delivery for the website, the license service, update downloads and request logs; transactional email delivery; product analytics for the anonymous usage, crash and website events above; and the reseller above for payments. They process data only on our instructions (except the reseller, which is responsible for payment data itself). Some are located in the United States; transfers rely on standard contractual clauses or equivalent safeguards. The current list is available on request.
Retention
License records and orders are kept as long as the license exists and then as long as tax law requires. Activation records (Mac hash, Mac name, app version, last seen) are deleted when a Mac is removed from a license; a short activation history is kept with the license to detect shared keys. Sign-in links and license manager sessions expire after 7 days. Anonymous usage events, crash reports and website analytics are kept for up to 2 years. Request logs are kept for up to 30 days.
Your rights
You can ask for a copy of your data, its correction or deletion, a portable copy, or object to or restrict processing, by emailing team@showtake.app. Because app usage events are anonymous, we cannot find them by your name or email; turning the setting off stops them. If you are in the EU, UK or a similar jurisdiction you may also complain to your data protection authority. Deleting your data also deactivates your licenses.
Security
License keys and sign-in links are stored only as hashes, all traffic uses HTTPS, and license tokens are signed so they cannot be forged.
Children
ShowTake is a developer tool and not directed at children under 16.
Changes
We will update this page and its date when this policy changes, and email license holders about material changes.