Privacy Policy
Effective date: 11 October 2026
Oxcart is local-first. Your containers, images and files stay on your Mac. This page says what little we do collect, why, and who else handles it.
Who is responsible
Charles Martens, 13627 SW 112th LN, Miami, FL 33186, USA, an individual, is the data controller for the data described here. Contact: privacy@oxcart.cc.
Paddle is a separate controller for your payment data (see below).
What stays on your Mac
Containers, images, volumes, files, logs and settings stay on your Mac. We don’t receive them. Your trial start date and your license are stored in your login Keychain on your Mac. Oxcart has no telemetry, no analytics and no crash reporting.
What the app sends to us
The app contacts only oxcart.cc. It does not contact anyone else, except the container registries you choose when you pull images.
- Update checks. Oxcart (using Sparkle) asks oxcart.cc for the update feed, about once a day. It sends no system profile. As with any web request, our host sees your IP address and the app name and version in the request.
- Activating a license. You enter your email. We send your email, a random install ID, your Mac’s name (as set in System Settings, which may contain your name) and the app version to oxcart.cc, and email you a one-time link.
- Weekly license check-in. About once every 7 days the app sends your license ID, install ID and app version. Nothing else. The reply says whether the license is still valid.
- The 60-day trial is counted on your Mac only. It contacts no server.
The MCP integration for coding agents is local only. It runs on your Mac and makes no network connection of its own.
What we store about licenses
On our license service (Cloudflare D1):
- your email address, license ID and major version, and any organization or seat assignment;
- for each Mac: its random install ID, name, app version, activation time and last check-in time;
- hashed, single-use sign-in and activation tokens (we keep a hash, not the token), short-lived;
- an audit log of license actions (for example issued, revoked, deactivated);
- from your purchase: the Paddle transaction and customer IDs, order details, amount and currency (not your card details).
We don’t store IP addresses in the license database. For rate limiting we keep a one-way hash of the IP address for at most an hour.
Why we use it, and our legal basis
- To sell, activate and enforce licenses, give support and keep records: performance of our contract with you.
- To deliver updates and protect the service from abuse (rate limits, security): our legitimate interest in running a safe service.
- To keep tax and accounting records: legal obligation.
- Email we send is for activation, sign-in and receipts, including sign-in links for feature requests. No marketing.
Website
oxcart.cc has no analytics, no cookies for tracking, no ads and no third-party scripts. Fonts and images are served from oxcart.cc itself. Signing in by email to manage licenses or participate in feature requests sets one cookie to keep you signed in for 60 minutes. If you choose a language, we save that preference in your browser’s local storage.
Feature requests
If you suggest a feature or vote, we store your verified email address, your request or vote, and the time it was created in Cloudflare D1. We use this information to review suggestions, prevent duplicate votes and operate the feature board. Your email address and unapproved requests are private. After approval, a request’s title, description, dates and vote count are public; voter email addresses are never public. Requests and votes remain stored until removed. You can remove your own vote on the board or contact privacy@oxcart.cc to request removal of your data.
Who else handles data (subprocessors)
| Who | What for | Data |
|---|---|---|
| Cloudflare, Inc. | Hosting (Workers, R2 for downloads, D1 database), DNS, and email (Email Service to send; Email Routing to receive mail sent to our addresses) | Everything in this policy; IP addresses and request metadata when you connect to oxcart.cc; the content of email you send and receive |
| Paddle.com Market Ltd / Paddle.com Inc. | Merchant of Record: payment, tax, invoices, refunds, fraud checks | Name, email, billing details, payment details, country. Paddle’s Privacy Notice applies |
We don’t sell your data and don’t share it for advertising.
How long we keep it
| Data | Kept for |
|---|---|
| Activation requests, sign-in links, sessions | deleted 24 hours after they expire |
| Rate-limit counters | deleted within a day of their window ending (at most 25 hours; daily salts at most 48 hours) |
| Deactivated Macs | 90 days after deactivation |
| Revoked licenses and their Macs | 2 years after revocation |
| Audit log entries | 2 years |
| Purchase records | 10 years (tax records) |
| Active licenses (email, license ID, Macs) | as long as the license exists |
| Mail you send to us | as long as needed to answer it, and no longer than 2 years |
Where data goes
Cloudflare and Paddle operate globally, so your data may be processed outside your country, including in the US and UK.
Your rights
Depending on where you live (for example the EU/UK under GDPR/UK GDPR, or California under CCPA/CPRA), you can ask to see, correct, delete or export your data, object to or limit some uses, and complain to your data protection authority. Write to privacy@oxcart.cc. We’ll answer within one month (45 days in California, extendable). We don’t discriminate against anyone for using these rights. You can deactivate a Mac, and see your licenses and Macs, in the license portal at oxcart.cc/license/signin.
We verify requests using the email address associated with your license or feature-board activity, after you confirm it with a sign-in link we send to that address. For payment data, contact Paddle.
Security
Connections use HTTPS. Updates are signed. Tokens are stored as hashes. Secrets are protected with Cloudflare Workers secrets. No system is perfectly secure. To report a vulnerability, write to security@oxcart.cc.
Children
Oxcart isn’t for anyone under 16.
Changes
We’ll post changes here with a dated notice and a new effective date. For material changes we’ll also email license holders.