Last updated 16 October 2026
Privacy
The short version: hyprmac collects nothing and never talks to the internet. This website counts visits the way a shop counts people through the door: totals, never who. No advertising, no tracking pixels, no fingerprinting, no profile of you. The only personal information that reaches us is an email address you type into a signup box, the name we put on an invite code we send you, or the details Stripe needs if you donate.
The app
hyprmac runs entirely on your Mac. It has no account system, no analytics, no crash reporting and no update check. It does not send your window titles, your configuration, your layout or anything else anywhere, because it has no code that makes a network request at all.
Its log file lives at ~/Library/Logs/hyprmac.log on your own disk. It is yours;
we never see it unless you attach it to an email yourself.
What this website counts
We want to know which pages people read and which posts brought them here, so we count a little. Everything below is a total. None of it says who you are, and none of it can be joined up into a picture of one person.
Visits. We use Cloudflare Web Analytics, the free tool from the company that hosts this site. A small script on each page tells Cloudflare a page was viewed and gives us totals: how many views each page got, which site linked here, which country visitors were in, what kind of device and browser, and how fast pages loaded. It uses no cookies and nothing stored in your browser, and Cloudflare says it does not fingerprint you or follow you from visit to visit. We see the totals in Cloudflare's dashboard, never a list of visitors.
Our own tallies. On our own server we keep a handful of daily totals:
how many pages were opened from a link with a campaign tag on it (the utm_
part of an address, like utm_source=newsletter), and which tag; how many
addresses joined the mailing list from each signup box; and how many times the beta
download link was used, by campaign tag. Each line reads like "16 October, newsletter,
3". Nothing else goes with it: no IP address, no browser details, no email, no cookie.
Invite codes. If you are sent an early-access invite code, we know who we made it for, because we made it for you. We note when the code is first used, each time it is entered, each build it downloads, any try after we switched it off, and the country Cloudflare saw for each of those (the country only, not your city or IP address), so we can tell whether a code has been passed around. Separately, we count how many codes were accepted and turned down per batch of invites, as totals.
What we do not do: no advertising networks, no Facebook, Google, TikTok or other tracking pixels, no fingerprinting, no selling or sharing of any of this, no profiles.
Cookies
One, and only if you have an invite code: when you type a good code on the early-access page, your browser keeps it in a cookie for 90 days so the download page stays open. It holds the code and nothing else. "Use a different code" on that page deletes it. Nobody else gets a cookie, and there is no consent banner because nothing here needs one.
Two things are kept in your browser, not sent to us. If you pick light or dark with the button in the header, your browser remembers that choice. If you arrived from a link with a campaign tag, the tab holds the tag until you close it, so a signup can say which post sent you.
Hosting and light or dark
The site is hosted on Cloudflare Pages, which keeps short-lived server logs including IP addresses for security and abuse prevention. That is standard for any web host and we do not query those logs for anything else.
The site switches between light and dark at sunrise and sunset where you are. To know when that is, Cloudflare's rough guess at your city (from your IP address, rounded to about 10 km) is written into the page you are reading, and your browser does the sums. It is not stored, logged or sent anywhere else, and there is no location prompt.
If you join the mailing list
We store the email address you give us, which page you signed up from, and, if the link
that brought you here carried a campaign tag (the utm_ part of an address, like
utm_source=newsletter), that tag, so we know which post sent you. Your browser
holds the tag in the tab until you close it; it is not a cookie. We also keep the sentence
you ticked to agree, and when. Nothing else — no name, no company, no profile. It is kept
in our own database on Cloudflare, the host this site already runs on; no mailing-list
company holds it.
We use it for what you agreed to: telling you when the WispOS beta date is set, and WispOS news and offers after that. We do not sell, rent, share or trade it. Every email has an unsubscribe link, and unsubscribing removes you immediately. If we later use a service to send those emails, we will name it here first.
If you donate
Payments are handled entirely by Stripe. Your card details never touch this site — you are on Stripe's own page when you enter them, and we never see or store them.
Stripe tells us the amount and the email address it collected for the receipt. We use that only to identify the payment. Donating does not add you to any mailing list. If you want updates, there is a separate signup box on the support page that you have to fill in yourself.
Fonts
The site currently loads its typefaces from Google Fonts, which means your browser requests those files from Google and Google sees your IP address in the process. We are moving to self-hosted fonts to remove that entirely.
Who we share with
That is the complete list. Nobody else receives anything.
| Service | What it gets | When |
|---|---|---|
| Cloudflare | IP address, in ordinary server logs; the page-view totals above; your email address or invite code record, stored for us | Every page view; the address only if you sign up, the code only if we invite you |
| Google Fonts | IP address, to serve font files | Every page view |
| Stripe | Payment details and an email for the receipt | Only if you donate |
Your rights
Wherever you live, you can ask us what we hold about you, ask for it to be corrected, or ask for it to be deleted. If you are in the UK, EU or EEA, the GDPR gives you those rights explicitly, along with the right to complain to your data protection authority.
The honest practical answer is that the most we are ever likely to hold is your email address, or the invite code we made for you and when it was used. Email [email protected] and we will delete it and confirm that we have.
We keep mailing list addresses until you unsubscribe or ask us to remove them, and invite code records until early access ends or you ask us to remove yours. The totals hold nothing about you, so there is nothing in them to delete. Stripe keeps payment records for as long as tax and accounting rules require.
Children
This is a developer tool and it is not directed at children. We do not knowingly collect anything from anyone under 16.
Changes
If this policy changes in a way that matters, the date at the top changes and — if you are on the mailing list — we will tell you rather than quietly editing the page.
Contact
Wisp OS is made by Keenan Carroll, who is the data controller for the purposes of the GDPR. Questions, requests and complaints all go to [email protected].