Privacy policy

The Cooked app doesn’t measure you. No telemetry, no usage statistics, no profile, no account. Your battery measurements are read and displayed locally; they never leave your Mac.

It reads two things from our servers, and only two. When you activate a license, once, it sends the key you pasted and a hashed machine identifier. And at most once a day, when you open it, it downloads a small file naming the latest released version: nothing is sent along with that request, not even the version you are running, and you can switch the check off in Settings then About.

The website, on the other hand, does measure. It counts its visitors without recognising them, and, if you agree to it, it records how you move through these pages so we can tell which ones do their job. That is the distinction to hold on to throughout this policy: the software on your Mac measures nothing, the website does. The cookies page sets out exactly what gets stored, and nothing is stored before you agree.

The other data we process is what you give us voluntarily by creating an account or buying a license on this site. This policy describes exactly what that is.

We also undertake never to offer to unlock a feature in exchange for sharing your data, a practice that is common among competing vendors. These terms exist in English and in French; in the event of any discrepancy, the French version prevails.

Controller

PANASSE

Address

2 impasse des Perdrix, 33260 La Teste-de-Buch, France

Contact

legal@cookedapp.io

Email address

Needed to create your account, send you a sign-in link and deliver your license key. Legal basis: performance of the contract.

License key and activation date

Needed so you can find your license and so activations can be counted. Legal basis: performance of the contract.

Technical activation identifiers

One non-reversible identifier per activated Mac, so activations can be counted and released. No serial number or machine name is kept in clear. Legal basis: legitimate interest in preventing license abuse.

Billing data

Purchase history and invoices, kept to meet our accounting and tax obligations. Legal basis: legal obligation.

Release-day list

If you ask to be told when Cooked is downloadable, your email address alone is stored, and only for that. It is deleted when you leave the list, in one click, from the link in the message, with nothing to sign in to. Legal basis: your consent, given by submitting the form.

Server technical logs

IP address and request timestamps, kept briefly to keep the service secure. Legal basis: legitimate interest in security.

Audience measurement

Page addresses, referring site, browser family and a country derived from your IP address, which is discarded, not stored. No cookie, no visitor identifier. Legal basis: legitimate interest in knowing whether these pages are read. See the cookies page.

Behavioural measurement on the website

If, and only if, you agreed to it: a random ID given to your browser, the pages you go through and in what order, what you click, and a recording of your visit to this site replaying mouse movement, scrolling and clicks. This data covers your visit to the website only and carries neither your name nor your email address. Legal basis: your consent, given in the banner and withdrawable at any time. See the cookies page.

We process no sensitive data. The behavioral measurement above produces usage statistics for the website and is never used to make an individual decision about you: it sets no price, no offer and no access. We carry out no automated decision-making producing legal effects concerning you.

Payments are handled by Armitage Labs OÜ (Creem), Telliskivi tn 57b/1, 10412 Tallinn, Estonie. We never have access to your full card details. That provider acts as controller or as processor depending on the nature of the operation, and its own privacy policy applies to the transaction.

Your data is never sold, rented or traded. It is disclosed only to the providers strictly necessary to run the service, who are contractually bound by confidentiality and security obligations.

• Site and database hosting: HOSTINGER INTERNATIONAL LIMITED, whose servers used for this site are in France and whose daily backups are kept in Lithuania, both inside the European Union.
• Payment processing and invoicing: Armitage Labs OÜ (Creem), Telliskivi tn 57b/1, 10412 Tallinn, Estonie.
• Transactional email delivery and the release-day list: Resend (Plus Five Five, Inc.), acting as our processor.
• Audience measurement: Umami Software, Inc., on its European region, so the measurements are stored in the European Union.
• Behavioural measurement on the website, if you agreed to it: PostHog, Inc., on its European region hosted in Frankfurt, so those measurements are stored in the European Union too.

Our host is a European company and your account data is stored in the European Union. Both measurement tools run on their provider’s European region, so those measurements stay in the Union too. Our email sending provider, however, is a United States company: the processing it carries out on our behalf involves a transfer outside the Union, framed by the European Commission’s standard contractual clauses.

• Account and license: for the lifetime of the account, then deleted on request.
• Dormant account: deleted after an extended period of inactivity, preceded by a warning email.
• Invoices and accounting records: the statutory retention period applicable in accounting and tax matters.
• Release-day list: until the message goes out, or until you leave the list, whichever comes first.
• Technical logs: a few days to a few weeks at most.
• Behavioural measurement on the website: session recordings are kept for one month, usage statistics for one year. Your answer to the banner lasts six months, after which you are asked again.

You have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to withdraw your consent where processing is based on it.

To exercise these rights, write to legal@cookedapp.io. We answer within one month. You may also lodge a complaint with the French data protection authority (CNIL), or with the supervisory authority of your own country of residence in the European Union.

Deleting your account does not invalidate your license: the software keeps working on the Macs already activated.

Exchanges with this site are encrypted in transit. Authentication relies on a single-use link sent by email: we store no passwords, which removes the risk associated with their compromise.