Privacy Policy

Request bodies, private keys, certificates and DNS query logs all stay on your Mac. The Lixeam desktop application itself embeds no telemetry and no third-party analytics scripts.

On activation Lixeam submits to api.lixeam.com: (1) the license key (starts with LXEM-); (2) the machine fingerprint (macOS IOPlatformUUID). The backend uses this to verify the purchase with Paddle and sign an offline token.

Re-validation follows the same flow (license key + machine fingerprint), at most once per day.

We do not collect browsing history or analyse usage patterns; we do not collect DNS query content or record request bodies; we do not upload private keys, certificates or site configs; the desktop application deploys no analytics or tracking scripts of its own (website measurement is described in section 8).

Paddle.com: Merchant of Record, handles payments and global tax. Paddle holds your email and transaction data; see paddle.com/privacy.

Cloudflare: hosts the licensing API (Workers) and the database (D1). It stores only license keys, machine fingerprints and seat records; no request content. Cloudflare also provides the website's cookieless traffic measurement (see section 8).

License records are retained for 90 days after a refund or token expiry, for troubleshooting and reconciliation. On refund the machine fingerprint is removed from the seats table immediately.

On activation the service signs an offline token with a fixed validity (365 days for one-time purchases, 14 days for subscriptions); a 3-day offline grace window follows expiry. During the grace window the app stays fully usable without network access.

You may at any time email support@lixeam.com to: (1) request a copy of the records tied to your machine fingerprint; (2) request deletion of your license record. After deletion the software returns to the trial state.

The website sets no cookies and writes nothing to localStorage. Traffic is measured with Cloudflare Web Analytics, which uses no client-side state and does not identify individuals by IP address or user agent: an IP address is used only to infer the country or region at request time, and unsampled details are kept for 7 days before being reduced to aggregate sampling. What we see is aggregate page views, referrers and countries — the site runs no cross-site tracking and sends no data to advertising platforms.

The Lixeam desktop application embeds no telemetry and no analytics scripts.

For privacy-related questions, email support@lixeam.com.