Privacy

What stays on your Mac

• What you listen to. Vitrola asks Spotify or the Music app on your Mac for the track, artist, album, artwork and position, with the automation permission macOS asks you for. The app uses that on your Mac to draw the record and the cover. It doesn't send it to us.
• The last covers you played, for the pile of records on the desk, in ~/Library/Application Support/Vitrola, and the track durations it has seen for each album, so the same album always draws the same record.
• Your license key and license token, in your Mac's Keychain.

What the app sends, and where

Our license server (api.getvitrola.com)

• A device identifier. It's a SHA-256 hash of your Mac's hardware UUID with a prefix that only Vitrola uses. We never see the UUID itself, and the hash can't be turned back into it. It keeps the free trial to one per Mac and a license to 2 Macs.
• Your license key, when you activate. We check it with Gumroad, then store it encrypted, plus a keyed hash to find it later and a masked version (first and last characters) to show in the app.
• The app version, and the dates of activation, renewal and of the trial.
• When you start a trial, a keyed hash of your IP address. We keep the hash, not the address, to limit how many trials one network can start.

The room itself (the rendered images of each framing) is downloaded from the same server, with the license token that the app received. Our code logs only shortened hashes, never the key or the IP address in clear. Cloudflare, which runs the server, sees the IP address of each connection and keeps its own short-lived request logs, like any host.

Other services the app talks to

• Weather: Open-Meteo, with the coordinates of the city in the window (São Paulo by default). Never your location.
• Updates: once a day the app reads getvitrola.com/appcast.xml to look for a new version. It doesn't send a system profile.
• Spotify covers: downloaded from Spotify's own servers, at the address the Spotify app gives. Music app covers come from the Music app, without going online.
• Track lists (optional, off by default, from version 1.0.4): if you turn on “Fetch the album's track list” in Settings, the app sends the album and artist name to Apple's public iTunes Search API, with no identifier, to draw the album's real tracks on the record.

The app has no analytics, no ads and no crash reporting.

When you buy

Gumroad runs the checkout and the payment. Your card details stay with Gumroad. Like every Gumroad seller, we can see the name and email of a purchase. We use them only to answer you about it: support, license problems and refunds. Gumroad's privacy policy covers the rest.

This website

• Vercel Analytics counts page views and button clicks (like “Buy”), with the page, referrer, campaign tags, country and device type. It uses no cookies and doesn't identify you.
• The site sets one cookie, lang, only if you switch language, to remember it. Campaign tags from the link you came from stay in your browser's session storage until you close the tab.
• To open checkout quickly, the page loads Gumroad's script from gumroad.com. Gumroad's own policy and cookies apply to it.

Your rights (LGPD)

The controller of this data is ONE.ZI TECNOLOGIA LTDA, in São Paulo, Brazil. Under Brazil's LGPD you can ask what we hold about your Mac or license, ask us to correct it, or ask us to delete it. Write to matheus@onezi.com.br. Deleting the records of an active license deactivates it on your Macs.

The license server runs on Cloudflare and this site on Vercel, so the data above may be processed outside Brazil. We keep trial and license records as long as they're needed to enforce the trial and the 2-Mac limit, or until you ask us to delete them.