MacGaze Privacy Policy
Last updated: 17 August 2026
The short version
Your face never leaves your Mac. Neither does your password. We never receive either one, and we could not hand them over if we were asked to, because we never have them.
MacGaze uses the internet only for licence checks and software update checks. A licence request contains your licence key and a name for your computer. An update check asks whether a newer MacGaze version is available. Neither request contains your face, your faceprint, your password, or camera images.
1. Who is responsible for your data
The operator of macgaze.com is the data controller for the limited data described below. Contact: macgazesupport@gmail.com.
2. What stays on your device and never reaches us
The following is stored only on your Mac and is never transmitted anywhere:
| Data | Where it is stored | How it is protected |
|---|---|---|
| Your faceprints, which are numeric measurements describing your face | Inside MacGaze’s own folder in your Library | Encrypted with AES-GCM; key held in your macOS Keychain |
| Your macOS login password | your macOS Keychain | Encrypted before storage; key held in your Keychain |
| Your settings and trial dates | macOS preferences and Keychain | Standard macOS protection |
Camera images are never written to disk and never leave your device. Frames are held in memory only long enough to compute a faceprint, then discarded.
Faceprints are not photographs. They are lists of numbers. They cannot be turned back into a picture of your face.
Biometric data: a specific note
Your faceprint is biometric data, which is sensitive information under the Privacy Act 1988 (Cth) and special category data under the GDPR (Article 9). Because it is created and stored solely on your own device under your own control, and never transmitted to us, we do not collect, process or hold your biometric data at any point. Your consent to create it is given by choosing to enrol your face, and you can destroy it at any time (see section 6).
3. What we do receive
| Data | Why | Who handles it |
|---|---|---|
| Your name and email address | To sell you a licence and send you your key | Our payment provider, as merchant of record |
| Payment details | To take payment | Our payment provider only. We never see your card details |
| Your licence key, and a name for your computer | To activate your licence and enforce how many Macs it covers | Our payment provider |
| Download requests | To deliver MacGaze and count aggregate downloads | GitHub Releases and its standard service logs |
| Support emails you send us | To answer them | Our email provider |
Our payment provider is the merchant of record, meaning they are the legal seller and they handle payment data under their own privacy policy. We receive only the order and licence information needed to support you.
The MacGaze app does not use analytics or advertising identifiers. The MacGaze website and Lemon Squeezy storefront use Google Analytics 4 for limited measurement, including page views, traffic sources, product views, checkout starts and completed purchases. Google Analytics may use cookies or similar identifiers and may process device, browser and approximate region information. We do not intentionally send camera frames, faceprints, passwords or licence keys to Google Analytics.
The hosted checkout is operated by Lemon Squeezy, which may also use Google Analytics in accordance with the Measurement ID configured for our store. Lemon Squeezy remains the payment processor and merchant of record for checkout data. See the Lemon Squeezy Privacy Policy and Google Privacy Policy for their handling of data.
MacGaze downloads are delivered by GitHub Releases. GitHub displays an aggregate download count for each release file and may process standard request information under its own privacy statement. MacGaze does not add a device identifier, advertising identifier or custom tracking parameter to the download link. See the GitHub General Privacy Statement.
4. Legal basis for processing (GDPR)
Where the GDPR applies to you:
- Performance of a contract (Art. 6(1)(b)) applies to your name, email, licence key and device name; we cannot sell or support a licence without them.
- Legitimate interests (Art. 6(1)(f)) applies to licence activation records, to prevent one licence being used on unlimited machines.
- Legal obligation (Art. 6(1)(c)) applies to transaction records we are required to retain (see section 5).
We do not rely on consent for the licence and support processing described above. Where consent is required for analytics or cookies, we will request it through the relevant website or checkout experience. We do not process analytics data for marketing.
5. How long we keep things
| Data | Retention |
|---|---|
| Order and transaction records | 7 years. Australian tax law requires this and we cannot delete them earlier |
| Your licence key and activation records | Until you ask us to delete them, or 2 years after your last activation, whichever is sooner |
| Support emails | 2 years from the last message in the thread |
| Website analytics events | Handled by Google Analytics and retained according to the property settings and Google’s policies; we do not use them to identify your face or password |
| Website and download service logs | Handled by Cloudflare, GitHub and our other service providers according to their own retention settings and policies |
| Your faceprint and password | We never have these. They stay on your Mac until you delete them |
6. Deleting your data
Deleting your face and password (immediate, entirely in your control)
Choose "Forget my face" from the MacGaze menu bar icon. This deletes your faceprints and your stored password from your Mac immediately. Deleting the app itself also removes them.
Because we never had this data, there is nothing for us to delete and nothing to request from us.
Asking us to delete what we do hold
Email macgazesupport@gmail.com. We will delete your name, email, licence key and activation records within 30 days and confirm when it is done.
We cannot delete transaction records within the 7-year window required by Australian tax law. We will tell you exactly what we retained and why.
Deleting your licence record means we can no longer reissue your key if you lose it, and your licence may stop being reactivatable on new machines. We will warn you before proceeding.
7. Your other rights
Where the GDPR, the UK GDPR, or the Australian Privacy Principles apply, you may ask us to:
- access the data we hold about you, and receive a copy;
- correct anything inaccurate;
- delete it (subject to section 6);
- restrict or object to our processing of it;
- port it to you in a machine-readable format.
Email macgazesupport@gmail.com. We respond within 30 days. There is no charge.
If you are in the EU or UK and are unhappy with our response, you may complain to your local data protection authority. In Australia, you may complain to the Office of the Australian Information Commissioner (oaic.gov.au).
8. International transfers
Our payment provider processes data outside Australia, including in the United States and the EU, under their own safeguards and standard contractual clauses. Because your face and password never leave your Mac, no biometric data is ever transferred anywhere.
9. Children
MacGaze is not directed at children under 16, and we do not knowingly collect their personal information. If you believe a child has provided us with personal information, email us and we will delete it.
10. Data breaches
If a breach of the data we hold occurs and it is likely to result in serious harm, we will notify affected people and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme, and supervisory authorities within 72 hours where the GDPR applies.
Because your faceprint and password are never in our possession, they cannot be exposed by a breach of ours.
11. Changes
We will post changes here and update the date above. If a change materially affects how we handle your data, we will say so prominently on macgaze.com.