Privacy Policy

Last updated: July 6, 2026

MixDesk is made by Gopher Tech, LLC ("we", "us"). This policy explains what MixDesk and the mixdesk.app website do and do not collect. We built MixDesk to run entirely on your Mac, so most of the time there is simply nothing to collect.

The short version

• Your audio is processed on your device and never leaves your Mac. We never receive it, store it, or transmit it.
• There is no account and no sign-in. You do not create a profile to use MixDesk.
• Licenses verify offline on your Mac. Activating one contacts us once to tie it to your device — sending a one-way hash of your Mac's hardware id, never the id itself — and then the app works offline.
• The little we do collect is listed below, in plain terms.

Your audio stays on your device

MixDesk uses Apple's Core Audio process-tap API to read the audio levels of apps that are already playing, so it can show meters and adjust per-app volume. This uses the macOS "System Audio Recording Only" permission, which is audio-only. The audio is handled locally, in real time, to draw meters and set volumes. It is never recorded to disk, never sent over the network, and never reaches Gopher Tech or any third party.

What we collect, and why

Here is the complete list.

Payment and license delivery (Stripe)

When you buy a license, checkout is handled by Stripe, our payment processor. Stripe collects your payment details and email address to process the one-time $9 charge and to deliver your license key by email. We receive your email address and basic order information (such as an order or receipt id) so we can send your key and handle support and refunds. We do not receive or store your full card number. Stripe processes this data under its own privacy policy at stripe.com/privacy.

Email delivery (Resend)

To deliver your license key, we send you an email through Resend, our transactional email provider. Resend receives your email address and the contents of that message (your license key and order details) solely to deliver it to you. It is not used for marketing. Resend processes this data under its own privacy policy at resend.com/legal/privacy-policy.

License activation and device binding

To keep a license from being shared across unlimited machines, the app contacts us once when you activate. It sends your license key (which carries your email and order id) and a one-way SHA-256 hash of your Mac's hardware identifier. We never receive the hardware identifier itself — only the hash — and the app sends no other information in this call. We store the hash alongside your order (in Cloudflare Workers KV) to count how many devices a license is active on and to let you move your license between machines. You can view and deactivate your devices anytime at mixdesk.app/devices. This hash is personal data under GDPR because it is linked to your order; our lawful bases are performing our contract with you and our legitimate interest in preventing unauthorised use.

In-app product analytics (Amplitude)

MixDesk sends anonymous product-usage events — such as the app launching, the mixer being opened, or a feature being used (mute, per-app volume, transport), plus trial and purchase milestones — to Amplitude so we can understand which features matter and improve the app. This is on by default. You can turn it off at any time with the “Share Anonymous Usage Data” toggle in the app’s (…) menu, which stops all event collection. The events carry no name, email, account, audio content, or any record of which apps or tracks you play. They are tied to the same one-way hashed device identifier used for license activation; because that hash is stored alongside your order, it is pseudonymous rather than fully anonymous (it could in principle be linked back to your purchase). Our lawful basis is our legitimate interest in improving the product, and you may opt out at any time via the toggle. We never sell this data.

Website analytics (cookieless)

If and when enabled, the mixdesk.app website uses privacy-friendly, cookieless analytics to count page views and understand which pages are useful. Even then, it does not set advertising or tracking cookies, does not build a profile of you, and does not follow you across other sites. This is currently off, and this policy will continue to describe it accurately if we turn it on.

Hosting and infrastructure (Cloudflare)

The mixdesk.app website and its supporting API are served through Cloudflare. As part of delivering the site and protecting it from abuse, Cloudflare processes standard technical request data such as your IP address and request logs. This is inherent to how any website is served and is not used to identify you or build a profile. Cloudflare processes this data under its own privacy policy at cloudflare.com/privacypolicy.

Automatic update checks (Sparkle)

To keep MixDesk up to date, the app periodically checks our update feed (an appcast hosted at mixdesk.app) for new versions using the Sparkle framework. This check is a normal web request. It can include basic technical information such as your app version and operating system version, which is standard for software update checks and is used to serve the right update. It is not used to identify you.

What we do not do

• We do not sell or rent your personal information.
• We do not use your data for advertising, and we do not run ad trackers.
• We do not require an account, and we do not build a user profile.
• We do not access, record, or transmit the contents of your audio.

Data retention

We keep purchase and license records (such as your email, order id, license key, and the hashed device ids linked to your license) for as long as needed to support your license, provide updates, handle refunds, and meet tax and accounting obligations. Support emails are kept as long as needed to help you and for a reasonable period afterward. Anonymous analytics, if enabled, is retained in aggregate and is not linked to your identity. You can ask us to delete your purchase records — including your device hashes — where we are not legally required to keep them.

Your rights

Depending on where you live, you have rights over your personal data. We honor these rights for everyone, regardless of location.

If you are in the EU, UK, or EEA (GDPR)

You have the right to access the personal data we hold about you, to correct it, to delete it, to restrict or object to certain processing, and to receive a copy in a portable form. Our lawful bases are performing our contract with you (delivering and supporting your license) and our legitimate interests (keeping the software working, secure, and improving). You also have the right to lodge a complaint with your local data protection authority.

If you are in California (CCPA/CPRA)

You have the right to know what personal information we collect and how we use it, the right to request access to or deletion of that information, and the right to correct it. You have the right not to be discriminated against for exercising these rights. We do not sell or share your personal information as those terms are defined under California law.

To exercise any of these rights, email us at [email protected]. We will verify your request using the email associated with your purchase and respond within the time required by law.

Children

MixDesk is not directed to children under 13 (or the equivalent minimum age in your country), and we do not knowingly collect their personal information.

International transfers

Our service providers, such as Stripe, Resend, Amplitude, and Cloudflare, may process data in the United States and other countries. Where required, these transfers rely on appropriate safeguards under applicable law.

Changes to this policy

If we change this policy, we will update the date at the top and, for material changes, note it on this page. Continued use of MixDesk after an update means you accept the revised policy.

Contact

Questions about privacy? Email [email protected]. The data controller is Gopher Tech, LLC.