Privacy note

What we collect

• Waitlist form: your email address, interface language, one optional answer (the Pro feature you are interested in) and the time of sign-up. The consent box must be ticked.
• Downloads: the DMG is served by GitHub Releases; GitHub may log your request under its own policy. This site does not track downloads.
• Server logs: your IP address is kept for 30 days in the reverse-proxy/access logs of the site and the Moontra licence service, then deleted. The licence key and email address are not written to the logs.
• Licence record (if you buy Pro): Paddle transaction and customer ID, licence ID, package or single product (1 or 3 Macs), the Moontra apps it covers, update-entitlement end date per app, payment amounts and dates, refund status. Your purchase email address is kept to deliver the key and send the sign-in link; your name is not kept, and the licence key itself is not stored (only the licence ID).
• Seat record (when you activate a Mac): an irreversible device digest (SHA-256 of a hardware identifier, which cannot be turned back into it; it is derived separately for each app, so the same Mac has a different digest in Croptrove and in Copytrove), the app's product ID, the Mac's model name (for example MacBookPro18,1) or a short name you type, and the activation date. Your computer name and user name are never collected. Kept with the licence record.
• Account panel sign-in and session (account.moontrasoftware.com): your email address, a single-use sign-in link (valid 15 minutes; only its hash is stored), a hash of the session token, the licence ID and the expiry (7 days), plus the dates of Mac removals made in the panel. The session cookie is httpOnly and is not used for tracking.
• Analytics, advertising and trackers: none. This site uses no third-party analytics or advertising scripts.

Why, and on what basis

We use your waitlist email and answer only to tell you about Croptrove releases. The basis is your explicit consent, which you can withdraw at any time. Your purchase email address is used to deliver the licence key, send the sign-in link and renewal reminders (service emails, not marketing); the basis is the contract. This text is written to be fair to buyers worldwide; Türkiye's KVKK terms below apply where they apply to you.

Sharing and transfers

We do not sell your email. The site, the waitlist and the Moontra licence service run on our company server in the European Union, in Hetzner Online GmbH's data centre in Finland; waitlist data is not sent to any other email or marketing service. Licence, device and account records of Croptrove, Copytrove and every other Moontra app are kept in one shared Moontra licence service (account.moontrasoftware.com); there is no separate account per app. Licence-key, sign-in-link and reminder emails are sent through Resend (Plus Five Five, Inc., USA), a processor that handles your email address and the email content on our behalf, mainly in the USA under the EU Standard Contractual Clauses; no clipboard data or device digest is sent to it. If you write to info@moontrasoftware.com, the correspondence is kept in Google Workspace. The basis for these transfers abroad is the standard contract under KVKK art. 9/4-c, notified to the Turkish Personal Data Protection Board within 5 business days of signature. If you buy Pro, you give your payment details directly to Paddle at checkout; Paddle processes them under its own privacy policy and passes us the limited information needed for the purchase (for example email, country, order number).

How long we keep it

Waitlist data: 12 months after Pro goes on sale, or until you withdraw consent or ask us to delete it (whichever comes first). Server logs: 30 days. Licence and purchase records: 10 years from the end of the year the record was created (Turkish Commercial Code art. 82).

Your rights

Under KVKK (Türkiye) and, if you are in the EU, GDPR you can ask for access, correction, deletion, objection, data portability, and withdraw your consent. Write to info@moontrasoftware.com. We answer within 30 days; you may also complain to the supervisory authority.

The Croptrove app

The app collects no personal data: your screenshots and recordings stay on your Mac only; they are never sent to, or kept on, any server. The network is used only for actions you start, such as activating or removing a Mac, update checks and the payment page, and, while automatic update checks are on (the app asks on first use and turns them on only with your consent; you can switch them off in settings at any time), for one licence verification together with the update check, at most once a day. Activation and verification go to the shared Moontra licence service and send only the licence key (activation only), the app's product ID, this Mac's irreversible device digest (separate for each app) and model name, and the signed activation confirmation; the reply is “valid / this Mac was removed / licence refunded”. On a removed or fully refunded Mac, Pro turns off at the next verification; if there is no successful verification for 60 days the app asks you to verify, and on day 75 Pro pauses until you do. Your data is never deleted by this. The 14-day trial needs no card or account and is kept only on your Mac. The service is not aimed at children. We may update this note; the current version is always on this site.