Privacy Policy

Last updated: July 9, 2026

MixDesk is made by Gopher Tech, LLC ("we", "us"). This policy explains what MixDesk and the mixdesk.app website do and do not collect. We built MixDesk to run entirely on your Mac, so most of the time there is simply nothing to collect.

The short version

• Your audio is processed on your device and never leaves your Mac. We never receive it, store it, or transmit it.
• There is no account and no sign-in. You do not create a profile to use MixDesk.
• Licenses verify offline on your Mac. Activating one contacts us once to tie it to your device. That sends a one-way hash of your Mac's hardware id, never the id itself, and then the app works offline.
• The little we do collect is listed below, in plain terms.

Your audio stays on your device

MixDesk uses Apple's Core Audio process-tap API to read the audio levels of apps that are already playing, so it can show meters, mute apps, and adjust volume. This uses the macOS "System Audio Recording Only" permission, which is audio-only. The audio is handled locally, in real time, to draw meters and set volumes. It is never recorded to disk, never sent over the network, and never reaches Gopher Tech or any third party.

What we collect, and why

Here is the complete list.

Payment and license delivery (Stripe)

When you buy a license, checkout is handled by Stripe, our payment processor. Stripe collects your payment details and email address to process the one-time $9 charge and to deliver your license key by email. We receive your email address and basic order information (such as an order or receipt id) so we can send your key and handle support and refunds. We do not receive or store your full card number. Stripe processes this data under its own privacy policy at stripe.com/privacy.

Email delivery (Resend)

To deliver your license key, we send you an email through Resend, our transactional email provider. Resend receives your email address and the contents of that message (your license key and order details) solely to deliver it to you. It is not used for marketing. Resend processes this data under its own privacy policy at resend.com/legal/privacy-policy.

License activation and device binding

To keep a license from being shared across unlimited machines, the app contacts us once when you activate. It sends your license key (which carries your email and order id) and a one-way SHA-256 hash of your Mac's hardware identifier. We never receive the hardware identifier itself, only the hash, and the app sends no other information in this call. We store the hash alongside your order (in Cloudflare Workers KV) to count how many devices a license is active on and to let you move your license between machines. You can view and deactivate your devices anytime at mixdesk.app/devices. This hash is personal data under GDPR because it is linked to your order; our lawful bases are performing our contract with you and our legitimate interest in preventing unauthorised use.

The same one-way hash is also sent when you first run the app, before any purchase, so we can record when your free trial began and keep uninstalling and reinstalling from resetting it. This call sends only the hash (and, at most, the trial start already stored on your Mac); it carries no name, email, or other information. Before you buy, this trial record is not linked to any identity; it is tied only to the hashed device id. Our lawful basis is our legitimate interest in preventing trial abuse.

In-app product analytics (Amplitude)

MixDesk sends anonymous product-usage events to Amplitude so we can understand which features matter and improve the app. Those events include the app launching, the mixer being opened, a feature being used (mute, per-app volume, transport), and trial and purchase milestones. This is on by default. You can turn it off at any time with the “Share Anonymous Usage Data” toggle in the app’s (…) menu, which stops all event collection. The events carry no name, email, account, audio content, or any record of which apps or tracks you play. They are tied to the same one-way hashed device identifier used for license activation; because that hash is stored alongside your order, it is pseudonymous rather than fully anonymous (it could in principle be linked back to your purchase). Our lawful basis is our legitimate interest in improving the product, and you may opt out at any time via the toggle. We never sell this data.

Website analytics

The mixdesk.app website uses Amplitude to understand how people find and move through the site, such as page views, referrer, and clicks on links like Buy and Download, so we can improve it. To do this, Amplitude stores a random device identifier in your browser's local storage. This is not an advertising cookie, is not shared with other websites, and carries no name, email, or audio content. These web events go to the same Amplitude project as the app's anonymous product analytics.

We also use Amplitude Session Replay, which records an anonymized playback of your visit (pointer movement, clicks, and page navigation) so we can find confusing parts of the site. Every text field is masked: anything you type, such as your email address, is captured as asterisks and never recorded.

How your choice works depends on where you are. If you are in the European Economic Area, the United Kingdom, or Switzerland, none of this runs until you choose “Allow” in the small banner shown on your first visit; choose “Decline” and no analytics or replay code is loaded or run at all. Everywhere else, analytics is on by default and the same banner lets you opt out at any time — choose “Decline” and we stop and unload it. Either way you can change your mind later; clearing your browser storage for this site resets the choice. All requests are sent through our own domain rather than to third-party analytics addresses. We may additionally use a cookieless page-view counter (such as GoatCounter or Cloudflare Web Analytics) that sets no identifier. Our lawful basis is your consent where it is required, and our legitimate interest in understanding and improving the site elsewhere; we never sell this data.

Advertising measurement (Google Ads)

When we run ads, we use Google Ads conversion tracking (the Google tag) to measure whether an ad led to a download or a purchase, so we don't waste money on ads that don't work. We use Google Consent Mode, and it follows the same regional rule as our analytics above: in the EEA, UK, and Switzerland the tag sets no advertising cookies and sends only anonymous, cookieless signals until you choose “Allow”; elsewhere the measurement is on by default until you opt out. When measurement is active it may set a Google advertising cookie for this purpose.

For a completed purchase, and only when measurement is active for you (that is, unless you opted out, or in the EEA/UK/Switzerland unless you opted in), we also use Enhanced Conversions: a one-way SHA-256 hash of your email address is generated in your browser and sent to Google so it can confirm the sale came from an ad click. The plaintext email is never sent, and if measurement is off for you, no email or hash is sent at all. Google processes this data under its own privacy policy at policies.google.com/privacy. We never sell this data.

Also only when measurement is active for you, and only if you actually arrived from one of our ads, we store Google's click identifier (the gclid that Google appends to the link you clicked) in your browser's local storage. If you go on to buy, we pass that identifier to Stripe with your order and later report the completed sale to Google Ads against it, so we can tell which ad led to a purchase. It is a measurement identifier, not an advertising profile: it says an ad worked, not who you are. If measurement is off for you, or you arrived any other way, nothing is stored and nothing is reported.

Hosting and infrastructure (Cloudflare)

The mixdesk.app website and its supporting API are served through Cloudflare. As part of delivering the site and protecting it from abuse, Cloudflare processes standard technical request data such as your IP address and request logs. This is inherent to how any website is served and is not used to identify you or build a profile. Cloudflare processes this data under its own privacy policy at cloudflare.com/privacypolicy.

Automatic update checks (Sparkle)

To keep MixDesk up to date, the app periodically checks our update feed (an appcast hosted at mixdesk.app) for new versions using the Sparkle framework. This check is a normal web request. It can include basic technical information such as your app version and operating system version, which is standard for software update checks and is used to serve the right update. It is not used to identify you.

What we do not do

• We do not sell or rent your personal information.
• We do not retarget you, follow you across other websites, build an advertising profile, or share your data with ad networks for targeting. The only advertising use is measuring whether our own ads led to a download or a purchase, and only while measurement is active for you (opt-in in the EEA/UK/Switzerland, opt-out elsewhere) — see “Advertising measurement” above.
• We do not require an account, and we do not build an advertising profile or identify you personally.
• We do not access, record, or transmit the contents of your audio.

Data retention

We keep purchase and license records (such as your email, order id, license key, and the hashed device ids linked to your license) for as long as needed to support your license, provide updates, handle refunds, and meet tax and accounting obligations. Support emails are kept as long as needed to help you and for a reasonable period afterward. Anonymous analytics, if enabled, is retained in aggregate and is not linked to your identity. You can ask us to delete your purchase records, including your device hashes, where we are not legally required to keep them.

Your rights

Depending on where you live, you have rights over your personal data. We honor these rights for everyone, regardless of location.

If you are in the EU, UK, or EEA (GDPR)

You have the right to access the personal data we hold about you, to correct it, to delete it, to restrict or object to certain processing, and to receive a copy in a portable form. Our lawful bases are performing our contract with you (delivering and supporting your license) and our legitimate interests (keeping the software working, secure, and improving). You also have the right to lodge a complaint with your local data protection authority.

If you are in California (CCPA/CPRA)

You have the right to know what personal information we collect and how we use it, the right to request access to or deletion of that information, and the right to correct it. You have the right not to be discriminated against for exercising these rights. We do not sell or share your personal information as those terms are defined under California law.

To exercise any of these rights, email us at [email protected]. We will verify your request using the email associated with your purchase and respond within the time required by law.

Children

MixDesk is not directed to children under 13 (or the equivalent minimum age in your country), and we do not knowingly collect their personal information.

International transfers

Our service providers, such as Stripe, Resend, Amplitude, Google (Ads conversion measurement), and Cloudflare, may process data in the United States and other countries. Where required, these transfers rely on appropriate safeguards under applicable law.

Changes to this policy

If we change this policy, we will update the date at the top and, for material changes, note it on this page. Continued use of MixDesk after an update means you accept the revised policy.

Contact

Questions about privacy? Email [email protected]. The data controller is Gopher Tech, LLC.