Privacy Policy

1. What stays on your Mac

MacWashing scans your Mac locally. The files it finds, their names and sizes, your list of apps, privacy permissions and login items never leave your Mac. The app contacts our server only to sign in, to check your license and to check for updates of the app and its rule database; an update check tells us only the macOS version and the app version, so that we can offer the right update and count installations.

2. What we collect

When you create an account and use a license, we store:

• Account: your e-mail address, a one-way hash of your password (never the password itself), your language, and dates of registration and sign-in.
• Sign in with Apple, if you use it: the identifier Apple gives us for you and a token we need to unlink your account from Apple when you delete it. Apple may give us a private relay address instead of your real e-mail.
• Macs you sign in: the name, model and macOS version of the Mac, the app version, a one-way hash of the hardware identifier (so the same Mac is recognized after reinstalling), a public key the Mac generates (its private key never leaves the Mac), and when it was last seen.
• License and payments: the plan, number of Macs, paid period and status, and from the reseller the order identifier and whether a payment was made or refunded. We never receive your card details.
• Technical data: IP address and browser type of your website sessions, and server logs with the IP address and requested page, used to keep the service secure and to limit abuse.

3. Cookies and analytics

The website uses only cookies it needs to work: your session, protection against forged requests, the chosen language and a short-lived cookie during Sign in with Apple. We use no advertising or tracking cookies.

We use Cloudflare Web Analytics, which counts visits without cookies and without identifying you.

4. Why we use the data

• To provide your account and license and to tell your Macs whether they are licensed (performance of our contract with you).
• To send e-mails you need: password reset, security notices, receipts-related messages (performance of the contract).
• To keep the service secure: rate limits, detecting abuse, investigating incidents (our legitimate interest).
• To keep payment records required by tax and accounting law (legal obligation).

5. Who processes it for us

We share data only with providers that run the service for us, under contracts that protect it:

• our authorized online reseller — processes payments as the Merchant of Record and has its own privacy policy for the purchase.
• Cloudflare — network, protection against attacks, cookie-free analytics and e-mail delivery.
• Our hosting provider and an S3-compatible storage provider for backups in a private bucket.
• Apple — only if you use Sign in with Apple.

6. How long we keep it

Account, Mac and license data is kept while the account exists. When you delete your account in its Security section, the account, its Macs, sessions and licenses are deleted immediately. Copies remain in backups until they rotate out, at most 12 months. Payment records are kept as long as tax law requires, without the link to a deleted account. Sessions and sign-in codes expire on their own (website sessions after 30 days without use).

7. Your rights

You can see and change your data in your account, and delete the account yourself. You may also ask us for a copy of your data, its correction or deletion, or object to its use, by writing to [email protected]. If you live in the EU, the UK or Georgia, you may complain to your data protection authority.

Our servers and providers may be located outside your country; where the law requires it, transfers are covered by appropriate safeguards such as standard contractual clauses.

8. Children

MacWashing is not meant for children under 16, and we do not knowingly collect their data.

9. Changes and contact

We publish changes to this policy here with a new date and tell account holders about significant ones by e-mail. Contact for privacy matters: [email protected].