Privacy policy

Who this covers

This policy covers the ClickyPanel desktop application and the clickypanel.com website. "We" means that operator; contact[email protected] for any privacy question, including a request to see or delete data held about you.

The desktop app

What stays on your computer

Everything you connect and everything the app fetches. Analytics credentials, the list of sites you added, cached traffic numbers and your settings are stored locally in your operating system's application data directory. None of it is sent to us, and there is no ClickyPanel account or server to send it to.

How credentials are stored

API keys, tokens and provider passwords are encrypted at rest with XChaCha20-Poly1305. The encryption key is derived from stable identifiers of the machine the app is installed on, so a copied database is inert on any other computer and the credentials do not appear in plain text in backups, cloud-synced folders or support bundles.

This protects your credentials against copies of your local data leaving your machine (for example, in backups or cloud-synced folders). It does not protect against other software running under your user account.

Who your data is sent to

Only the analytics providers you connect. The app calls their APIs directly from your computer, using the credentials you gave it. Their handling of that request is governed by their own privacy policies.

Crash reports

Anonymous crash reports are sent to Sentry (EU region) by default. A report contains the error, a stack trace, the app version and the operating system version. It does not contain your credentials, your site list or your analytics data. You can turn crash reporting off in Settings, and it stops immediately. Your computer's name and hardware model are removed before a report is sent, as is any web address appearing in an error message.

Updates

The app checks for new versions by requesting an update file fromdl.clickypanel.com, which we run. That request includes your IP address and app version.

This website

clickypanel.com is a static site on Cloudflare Pages. It runs no advertising scripts, shows no ads, and loads its fonts from its own domain rather than a third party. Cloudflare processes request logs as our hosting provider.

Visit statistics

We count visits to this site with Clicky, one of the analytics services ClickyPanel itself reads from. It is set not to store cookies on your device, and it does not follow you to other sites. Clicky receives your IP address, the page you opened, the page that referred you, and your browser and operating system versions, and reports them back to us as visit counts.

The v2 upgrade form

The v2 upgrade claim form is the only place on this site that accepts an email address.

The address you enter is compared against the list of ClickyPanel v2 purchase addresses, which is held as irreversible SHA-256 hashes rather than as addresses, and it is used to derive your personal discount code. Nothing about your claim is stored, which is why claiming twice produces the same code. A successful claim takes you to Dodo Payments' checkout, and your address is covered by the section below from that point on.

Purchases

Payments are handled by Dodo Payments as merchant of record. They collect the billing details needed to take payment and charge tax; we receive your email address, your licence key and the country of purchase. We never see your card number. We only use your email address to deliver your licence key, send receipts, and provide customer support. We do not spam, send marketing blasts, or share your contact info.

Your rights

You can ask what we hold about you, ask for it to be corrected, or ask for it to be deleted, by writing to [email protected]. Because the app holds nothing on our side and the upgrade form stores nothing, such a request concerns only your purchase record, which is held by Dodo Payments as merchant of record. To erase what the app stores, use Clear all local data in Settings, or delete its application data directory.

Changes

If this policy changes materially, the updated date above changes with it.