Privacy

Nexus SFT Limited runs altseat.com and the Altseat license service, and is the controller of the personal data on this page. It is a company registered in England and Wales under number 16569555, with its registered office at 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.

This notice covers the website, your account and the license checks the app makes. For anything about your data, write to support@altseat.com.

Only what selling and checking a license needs, and nothing else about you:

When you buy

From Paddle: your email address, the Paddle transaction id, your country, and the price id, amount paid and currency of the purchase. With them, the license keys of the purchase and whether each one is active or revoked, and the campaign tag of the link you arrived with, if it had one.

When you sign in

The email you sign in with and your sign-in session, kept by Better Auth in our own database. A session records the IP address and browser it was opened from. A sign-in link is stored only as a hash and expires after 15 minutes.

For each activation

A one-way hash of the Mac's id, never the id itself; the Mac's name (its hostname), to show on your account page; the app version; and when the key was activated and last checked.

Releases

When a key was released from a Mac, and whether that happened in the app, on your account page or by us. Released activations are kept as the key's release history.

Gifted keys

Your email address and a short note, which can hold a reason or a name.

Paddle notifications

For each notification Paddle sends about a purchase or a refund: its event id, its type, the transaction id, the price id, amount and currency it carries, for a refund or a chargeback its kind and status, and when it happened and when it arrived.

Abuse limits

Hourly counts of the sign-in links asked for per email address, the activation attempts per key and the order lookups per transaction.

Downloads

The download links count downloads per day, with the campaign tag of the link you arrived with, if it had one. No address, browser or identifier is stored.

Altseat works on your Mac. It sends something only in these cases:

License activation, check and release

When you activate a key and at the check every 7 days, the app sends altseat.com the key, a one-way hash of the Mac's id, the Mac's name (its hostname) and the app version. Releasing a key in the app sends the key and the hash.

Update check

The app asks altseat.com for the latest version number by itself, 90 seconds after launch and every 24 hours after that, and when you choose Check for updates. Our host logs that request briefly, like any other.

Codex usage

The app asks the Codex CLI's own local app-server, which gets the usage from OpenAI with that account's own sign-in. Nothing goes to us.

Usage endpoint option

Off by default. Only when you turn it on does the app ask Anthropic for a Claude account's usage, with that account's own sign-in. Those requests go to Anthropic, never to us.

There is no telemetry and no crash reporting. Your accounts, their usage and your settings stay on your Mac. Claude Code, Codex CLI and Kimi Code talk to their vendors as they always do.

Under UK data protection law, each use rests on one of these grounds:

Contract

To sell, deliver and check your license keys, and to run your account and its sign-in. Without this data we cannot license Altseat to you.

Legitimate interests

To keep the service safe: the abuse limits, the security of sign-in, and the IP address and browser a session records. For a gifted key, to deliver it to you.

Legal obligation

To keep the records of purchases and refunds that UK tax and accounting law requires.

Paddle

Payments, as our merchant of record. Your card or bank details go to Paddle only, and Paddle keeps its own record of your purchase under its own privacy notice.

Resend

Sends the license and sign-in emails.

Vercel

Hosts the site and the license service, which run in Frankfurt, Germany, and keeps short-lived request logs.

Neon

The database that holds the data above, in Frankfurt, Germany.

Our database and the site's functions are in Frankfurt, Germany. Vercel delivers the pages through its worldwide network, and some of our providers, Resend and Paddle among them, also process data in the United States.

Transfers from the UK to the EU and the EEA rest on the UK's adequacy regulations. Transfers to the United States rest on the UK Extension to the EU-US Data Privacy Framework where the provider is certified under it, and otherwise on the standard contractual clauses with the UK Addendum.

Licenses and purchases

Kept while the key can be used, with its activations and release history. Purchase records are then kept as accounting records for the 6 years UK law requires.

Sign-in

Your sign-in email stays with your account. A session lasts 30 days, and signing out deletes it. A sign-in link is deleted when it is used, and cleared out after it expires.

Abuse limits

Each count is deleted automatically after it is a day old.

Request logs

Kept by Vercel for a short time only.

Ask us, and we delete whatever the law does not require us to keep.

Signed-in customers get one first-party session cookie. It lasts 30 days, or until you sign out. That is the only cookie. The checkout keeps one entry in your browser's session storage, altseat.checkout.email, which passes the email you pay with to the thanks page and is cleared by the browser when the tab closes. Altseat runs no analytics and sets no third-party cookies. When you open the checkout, Paddle runs it under its own privacy notice.

If the link you arrived with carries a campaign tag, such as utm_source, the site keeps that tag for the current tab only, in the session storage entry altseat.source, and sends it with a download or a purchase; it stores no cookie for this and uses no third-party tracking.

Altseat is not directed at children under 16, and we do not knowingly keep their data.

We do not track you, and we never sell or share your data. There is no advertising and no profile of you anywhere.

Under UK data protection law you can ask to see the data we hold about you, to correct it, to have it deleted, to restrict how we use it, to receive it in a portable form, and to object to how we use it. Write to support@altseat.com, and we answer within one month.

You can complain to the Information Commissioner's Office at ico.org.uk. If you live in the EU, the EEA or Switzerland, you can also complain to your own data protection authority.