Privacy Policy

Chow Min Thian (an individual trader), Malaysia, is responsible for the personal data we process for MacnifyIt. Website: https://macnifyit.com/. Privacy contact: support@macnifyit.com.

Photo processing runs locally. The app sends no telemetry and does not upload photos. No account is required. The app connects to the internet only to activate or reactivate a licence, for its quiet monthly renewal and for the update check described below. Activation and renewal send your licence code and a hashed identifier for your Mac to our activation provider, Cloudflare, which also receives your IP address; abuse logs keep IP addresses for up to 24 hours. The app keeps your trial export count and, once activated, your licence code and signed activation token in one small file on your Mac, at ~/Library/Application Support/MacnifyIt/state.json. Deleting the app does not delete that folder; deleting the MacnifyIt folder removes these records, and you would need to enter your licence code again. The one thing the app does over the internet is activation: when you enter a licence code, and quietly about once a month afterwards when your Mac is online, it sends your licence code and a hashed identifier for your Mac (not your name, not your Mac’s name) to our licence service at api.macnifyit.com, run on Cloudflare. Cloudflare’s network necessarily sees your IP address; our abuse-limit log keeps it for up to 24 hours and then deletes it. Our licence service records the code, the hashed identifier and the times of activation and renewal. The app does not check for updates by itself; you download new versions from macnifyit.com/download. Downloads are served by Cloudflare, which sees your IP address and browser details like any website visit. Our website also counts completed download requests: it records only the date, your country, a category for where you came from (such as a search engine) and any campaign tag, with no IP address, no cookie and no identifier of your own, and deletes these counts after 400 days. Files or screenshots you deliberately send to support are handled as support information.

The app requests https://macnifyit.com/version.json about once a day to see whether a newer version is available. The request carries no account, device, licence or usage information, and sets and reads no cookies. Like any request to our website it reaches our web host, Cloudflare, which receives your IP address and standard connection details. You can turn the automatic check off with Check for Updates Automatically in the MacnifyIt menu; Check for Updates… in the same menu checks once when you ask. If you switch on Also Check When MacnifyIt Is Closed, the same single request can also happen once a day while the app is closed.

Paddle is our merchant of record and handles checkout and billing under its own Privacy Notice. Paddle is responsible for its processing of buyer and payment information. We use order and contact information received from Paddle to fulfil purchases, issue licence keys and handle order support: the transaction ID, the name and email address you gave at checkout, what you bought and when, and the licence key we issue for it. We do not receive or keep your card or other payment details.. We email your licence key from support@macnifyit.com through Google Workspace (Gmail), which processes the message to deliver it and keeps a copy in our sent mail. We keep a record of your licence and the Paddle order it came from in our licence database, which is hosted on Cloudflare. No MacnifyIt account is needed to purchase.

When you contact support@macnifyit.com, we receive what you send, such as your email address, message and attachments. We use it to answer your request and investigate the issue. Support email is hosted by Google Workspace, which stores messages on Google’s servers in locations Google determines. Do not send payment card details, full licence keys or photographs you cannot share.

This website uses three analytics services.

Cloudflare Web Analytics provides aggregate, cookieless measurement: page views, referrers, country, browser and device categories, and page-load timings. It sets no cookies and does not fingerprint visitors. See Cloudflare Web Analytics and Cloudflare’s privacy policy.

Plausible Analytics provides aggregate, cookieless measurement: page views, referrers, country, browser and device categories. It sets no cookies, stores no personal data and does not track visitors across sites; a visitor’s IP address is used only to derive a daily-rotating anonymous count and is never stored. See Plausible’s data policy.

Microsoft Clarity records how visitors use this website — pages viewed, clicks, scrolling, mouse movement and session replays — and builds heatmaps from that record. Clarity sets cookies: _clck and _clsk as first-party cookies, which identify a visitor and join page views into a single session, and CLID, ANONCHK, MR, MUID and SM as third-party Microsoft cookies, of which MUID is also used by Microsoft for advertising. The session data is processed by Microsoft; see Microsoft’s privacy statement. Clarity masks text typed into form fields by default.

If you are in the European Economic Area, the United Kingdom or Switzerland we ask for your consent before Clarity sets any cookie. If you decline, Clarity sets no cookies and gives each page view a new identifier, so nothing links one visit to another. To change your answer, clear this site’s stored data in your browser and reload the page. Microsoft deletes Clarity data on fixed schedules that we cannot lengthen or shorten: session replays after 30 days, and click and heatmap data, along with any session we label or favourite, after nine months. Deletion covers Microsoft’s backups and cannot be reversed.

The app sends no telemetry. Checkout. Paddle provides our checkout. Nothing from Paddle loads while you browse: only when you select Buy does the page load Paddle’s checkout script (Paddle.js) from Paddle’s servers and open the order form in a window served by Paddle. From that moment your browser is connected to Paddle, which receives your IP address and browser details, and Paddle and the payment providers it uses, such as Stripe, may set their own cookies to keep checkout secure, prevent fraud and complete your payment (for example “__cf_bm”, bot protection, about 30 minutes, and Stripe’s “m”, fraud prevention). See Paddle’s Privacy Notice. We never receive your card details, and our checkout code stores nothing in your browser. Apart from the above, this website stores one item in your browser: your cookie choice, saved in your browser’s local storage under the name “mi_consent” until you clear this site’s data. It is set only where we ask for consent, and it is used only to remember your answer. Our web host, Cloudflare, also receives connection information when you visit, such as your IP address and browser details, in order to serve and protect the site: your IP address, the pages and files you request, the time and your browser details, to serve and protect the site and to diagnose faults. Cloudflare keeps these logs, and the short-lived logs of our website’s code, for periods that Cloudflare sets and we do not control. We do not keep our own copy of website connection logs. Cookieless analytics does not mean the website receives no data.

We process data to deliver licences, support customers, operate the website and meet legal obligations. Where the law requires a lawful basis: we deliver licences and support you because it is necessary to perform our contract with you; we run, secure and measure the website and prevent abuse of licence activation for our legitimate interests in operating a safe product; we use Microsoft Clarity only with your consent where we ask for it, and you can withdraw it at any time by clearing this site’s stored data in your browser; and we keep order records because the law requires us to. Relevant recipients include Paddle and the providers identified above. Paddle acts as an independent controller for checkout and payment data. Cloudflare (website, licence service and database, and cookieless analytics) and Google (support email and licence-key email delivery) process data on our behalf. Microsoft processes Clarity session data under its own terms and privacy statement. We may also disclose information where the law requires it. We do not use your order or contact details for marketing, and we do not sell them. Microsoft Clarity, described above, sets a MUID cookie that Microsoft also uses for advertising where you have consented.

Retention: purchase and licence records for as long as your licence exists, support emails for 24 months after your last message, licence-service abuse logs, which include IP addresses, for 24 hours; website connection logs are kept by Cloudflare for periods it sets, Clarity session replays for 30 days and Clarity heatmap data for nine months; our own download counts, which hold no IP address, for 400 days, and seven years for the records we must keep for tax and accounting. If you ask us to delete your data we will delete or anonymise what we are not required to keep, within the time the law allows. Copies held in our providers’ backups are overwritten on those providers’ normal schedules. Processing locations and international transfers: Our licence database is stored in Cloudflare’s Asia-Pacific region. Cloudflare serves the website and licence service from data centres worldwide, and Paddle, Google and Microsoft process data in the United States, the United Kingdom and other countries. Where personal data is transferred out of the EEA, the UK or Switzerland, we rely on the safeguards those providers offer, such as standard contractual clauses or an adequacy decision.. Security measures: traffic to our website and licence service is encrypted in transit (HTTPS); we receive no card data; the app sends a hashed identifier for your Mac rather than any hardware ID; licence tokens are cryptographically signed; the licence service’s administrative functions require a secret key; and activation abuse-log IP addresses are deleted after 24 hours.

Depending on applicable law, you may request access, correction, deletion, restriction or portability, object to processing, or withdraw consent where used. Contact support@macnifyit.com. We may ask you to write from the email address used for your order, or to give your order details, before we act on a request, so that we do not disclose or delete someone else’s data. We answer within one month, or sooner where your local law requires. You may complain to the Personal Data Protection Commissioner of Malaysia (Jabatan Perlindungan Data Peribadi, https://www.pdp.gov.my) or the authority available under your local law. Ask Paddle directly about data it controls through its privacy contact in the linked notice. MacnifyIt is not directed at children, and we do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, contact support@macnifyit.com and we will delete it. We will update the effective date when this policy changes and provide notice or seek consent where required. Material changes will be announced on this page and, where the law requires, by email to the address on your order.