# Privacy policy

> What ShowTake collects (very little), why, and your rights. Recordings and source code never leave your Mac.

Source: https://showtake.app/privacy

ShowTake is made by ShowTake ("we", "us"). This policy covers the ShowTake Mac app, its MCP server, this website (showtake.app) and the license service (api.showtake.app).

**Controller:** ShowTake. Contact for anything in this policy: team@showtake.app.

**The short version:** your recordings, screenshots, flows, prompts and source code stay on your Mac. We never receive them, unless you choose to attach them to feedback and press Send. We process only what we need to sell and license the app, deliver updates and, unless you opt out, count anonymous usage to improve it. We do not sell personal data and we do not use it for advertising.

## What stays on your Mac

Everything ShowTake films or creates: raw recordings, event logs, flows, renders, exports, project settings, the names and bundle ids of the apps you film, and anything your coding agent sends to ShowTake's tools. Rendering happens on your Mac. The MCP server talks only to the ShowTake app on the same Mac, over a local socket that other users cannot open.

## What the app sends, and why

| Data | When | Purpose | Can I turn it off? |
| --- | --- | --- | --- |
| License key, a one-way hash of your Mac's hardware id, the Mac's name, app version | Activating a license, about once a day while a paid license is active, and when you remove a Mac | Check the license and the number of Macs using it; list your Macs in the license manager | Only by not using a paid license (the free version sends nothing for licensing) |
| A request for the update feed (your IP address and the app's name and version, as in any web request) | About once a day, and when you choose "Check for updates" | Offer the right update | Yes: turn off "Check for updates automatically" in Settings |
| A random install id, a random id for each app session, and usage events: app launched (first launch or not; installed with Homebrew, a browser download or the install script), app quit (session length), update installed (old and new version), setup steps viewed, completed or skipped, permissions requested and whether Accessibility and Screen Recording are allowed, the name and version of the coding agent connected (for example "claude-code 2.1"), MCP tool called (tool name, success, error code, duration), setup check results (which checks failed), project prepared or created (iOS or macOS, success, error code), take started/ended (success, issue codes, retake count), flow replayed, render and export (preset, success, error code), Pro feature requested on the free plan (tool and preset), checkout link created, checkout completed and license activated (plan), plus the app and macOS version | While you use the app | Learn which features work, where setup gets stuck and which fail | Yes: Settings → Privacy → "Share anonymous usage data and crash reports" (on by default) |
| A request for a music track (your IP address and the track's file name, as in any web request) | The first time you use a track from the built-in music library; afterwards it plays from your Mac | Download the track file from our download server; no personal data is sent | Yes: use your own music instead |
| Crash and hang diagnostics provided by macOS (code locations as binary name + offset, exception codes, hang duration, app version) and error codes of failed updates, license checks and app start-up, with a short message from which home-folder paths, email addresses, license keys and tokens are removed | After a crash or hang (on a later launch), or when the error happens | Fix crashes, freezes and errors | Yes, same setting |

Usage events and crash reports never contain file names, file paths, app names, captions, screen content, typed text, prompts, your license key or your email. The install id is random, stored only in the app's preferences, and not linked to your license or your email. The app sends these events to our own server (api.showtake.app), which removes your IP address and adds only your country before passing them on; we do not keep IP addresses with these events.

**Where installs come from.** On the app's first launch only, our server also attaches a one-way hash made from a secret value, the date and your IP address (no browser or device details). Visits, downloads and agent fetches on our website get the same kind of hash. Matching the two tells us, in aggregate, which websites and campaigns lead to installs. The hash changes every day, cannot be turned back into your IP address, and is never linked to your license or email. Turning off "Share anonymous usage data" stops it.

## Feedback you send

Feedback is sent only when you press **Send** in ShowTake's Send Feedback window (Help → Send Feedback…). Your coding agent can prepare a report with the `send_feedback` tool, but it opens in the same window and nothing leaves your Mac until you press Send there. A report contains:

- what you write, the kind (bug, idea, question, praise) and, if you give it, an email address for our reply;
- the app version, update channel, macOS version, Mac model and processor type, your license plan and state (never the key), the name and version of the coding agent that prepared it, and a one-way hash of the app's random install id (to limit abuse);
- unless you turn it off, diagnostics: ShowTake's setup check (Xcode, simulators, disk space, permissions, versions), its recent log of tool calls and errors, and summaries of ShowTake's own crash reports. Your home-folder path and user name, email addresses, license keys and tokens are removed first, and the window shows exactly what will be sent;
- only the files you attach: screen recordings, screenshots, takes, logs or other documents.

Reports are stored privately (never publicly reachable) and read only by the ShowTake team, who receive an email with the report and download links that expire after 7 days. We use them to fix problems, answer you and improve ShowTake. Reports and their files are deleted 180 days after you send them, and unfinished uploads after 7 days; ask us at team@showtake.app to delete one sooner (quote its reference, e.g. FB-XXXX-XXXX). You can also open a public issue on GitHub instead, which you write and publish yourself.

## Purchases

Orders are handled by our reseller, which acts as the merchant of record: it processes your payment details, billing address and tax information under its own privacy policy, and we never see your card number. From each order we keep your email address, the plan, the number of seats, the order and subscription status and dates, and the reseller's order, customer and product ids. We use them to issue and email your license key, run the license manager, answer support and meet tax and accounting duties. We store only a hash of your license key, never the key itself. For statistics we also count each paid order without any personal data: the plan, a price range, the currency, whether a discount applied and whether the checkout started in the app or on the website.

## The website

The website uses no advertising or tracking cookies and stores nothing in your browser for analytics. To count visits, page views, how far down a page you scroll, which sections you see and how long you stay, download and checkout clicks, use of the free tools and errors in the site's own scripts (the message and file, with link parameters removed), the site sends anonymous events through our own server, which replaces your identity with a random-looking id made from a secret value, the date, your IP address and your browser's user agent. That id changes every day, cannot be turned back into your IP address, and is never combined with your license or email. We record the page, the referring website, campaign tags in the link (such as `utm_source`), your country (derived from the IP address, which itself is not stored) and your device type. If your browser sends "Do Not Track" or "Global Privacy Control", the site sends no analytics at all. We do not record your screen, mouse movements or what you type on the site.

When you download the app through the website or the install script, our server counts the download (version, how it was downloaded, the referring website and campaign tags) under the same daily id. When a program fetches the plain-text pages meant for coding agents (such as `/agents.md` or `/llms.txt`), our server counts which page was fetched and what kind of program fetched it, judged from its user agent (for example a coding agent, a search crawler or a browser).

The license manager sets one strictly necessary cookie (`st_manager`, HttpOnly, up to 7 days) after you sign in with an email link. Our hosting provider keeps short-lived request logs (IP address, user agent, URL) for security and to fix errors. The App Preview checker and the other free tools run in your browser; your files are never uploaded.

## Email

We send transactional email only: your license key, a new key when you ask for one, sign-in links for the license manager, and replies to feedback when you gave us your email. Receipts and renewal notices come from our reseller. No newsletters unless you subscribe separately.

## Legal bases (EU/UK)

Licensing, purchases and support (including feedback you send): performance of our contract with you. Tax and accounting records: legal obligation. Anonymous app usage events, crash reports and website analytics: our legitimate interest in keeping ShowTake working and improving it, with an opt-out in the app and Do Not Track / Global Privacy Control honoured on the website. Security logs: legitimate interest in protecting the service.

## Service providers

We use a small number of providers to run ShowTake, each only for its part: hosting, storage and content delivery for the website, the license service, update downloads, feedback reports and request logs; transactional email delivery; product analytics for the anonymous usage, crash and website events above; and the reseller above for payments. They process data only on our instructions (except the reseller, which is responsible for payment data itself). Some are located in the United States; transfers rely on standard contractual clauses or equivalent safeguards. The current list is available on request.

## Retention

License records and orders are kept as long as the license exists and then as long as tax law requires. Activation records (Mac hash, Mac name, app version, last seen) are deleted when a Mac is removed from a license; a short activation history is kept with the license to detect shared keys. Sign-in links and license manager sessions expire after 7 days. Anonymous usage events, crash reports and website analytics are kept for up to 2 years. Feedback reports and their files are kept for 180 days. Request logs are kept for up to 30 days.

## Your rights

You can ask for a copy of your data, its correction or deletion, a portable copy, or object to or restrict processing, by emailing team@showtake.app. Because app usage events are anonymous, we cannot find them by your name or email; turning the setting off stops them. If you are in the EU, UK or a similar jurisdiction you may also complain to your data protection authority. Deleting your data also deactivates your licenses.

## Security

License keys and sign-in links are stored only as hashes, all traffic uses HTTPS, and license tokens are signed so they cannot be forged.

## Children

ShowTake is a developer tool and not directed at children under 16.

## Changes

We will update this page and its date when this policy changes, and email license holders about material changes.

## Contact

team@showtake.app