Legal

Privacy Policy

Last updated 18 June 2026

We collect as little as possible, never sell your data, and keep your projects on your Mac. Here’s exactly what happens.

What we collect

  • Your email address — to create your account and attach your license.
  • Purchase records — handled by Stripe. We see that you paid and your billing country (for VAT), never your card number.
  • A little app telemetry — your Mac’s hardware model (e.g. “Mac15,6”), macOS version, and Sleeve’s version, so we can fix crashes and keep compatibility.
  • Anonymous site analytics — which pages you view and buttons you click on this website, captured without cookies and never linked across other sites, so we can see how the site and signup flow are working.

We deliberately don’t collect device names, your designs, or any document content. Your projects and disk images never leave your Mac, and there are no advertising or cross-site trackers.

Why we use it, and our legal basis

We process your email and purchase data to provide the service you bought (performance of our contract with you) and to meet legal obligations such as keeping tax records. The app telemetry and anonymous site analytics rest on our legitimate interest in keeping Sleeve stable and understanding how the site performs — and you can ask us to stop at any time.

Who helps us process it

We rely on a few trusted providers, each only for its specific job:

  • Stripe — payments and invoicing.
  • Supabase (EU region, Ireland) — your account and license records.
  • Resend — sending sign-in codes and receipts.
  • Vercel — hosting this site and serving downloads.
  • PostHog (EU region) — privacy-friendly, cookieless product analytics.

We never sell or share your data with anyone for advertising.

How long we keep it

Account and license data: for as long as you have an account. Purchase and invoice records: for as long as the law requires (in the Netherlands, tax records are kept for seven years). Telemetry: only briefly, for diagnostics.

Your rights

You can ask us to access, correct, export, or delete your data, or to restrict or object to how we use it — just email dylan@squareone.nl and we’ll sort it out. Deleting your account removes your sign-in record; invoices we’re legally required to keep stay until that obligation ends.

If you’re in the EU/EEA you also have the right to complain to a data protection authority. In the Netherlands that’s the Autoriteit Persoonsgegevens.

Cookies

Only the essentials. A session cookie keeps you signed in, and Stripe sets its own cookies during checkout. Our analytics is cookieless, and there are no advertising cookies.

Children

Sleeve isn’t directed at children under 16, and we don’t knowingly collect their data.

Changes

If this policy changes, we’ll update the date above and call out anything significant.

Who's responsible

The data controller is Square One, based in the Netherlands. Reach us any time at dylan@squareone.nl.