Exeunt

Privacy

The app and the website are two different things, and they deserve two different answers. The app is the strong one.

The app

On its own, Exeunt contacts exeunt.app twice in its life: once when you activate your licence on a Mac, and once more about a month later, when its first licence file runs out, to confirm the licence wasn’t refunded. During the free trial it makes neither call. Once that second check succeeds it never contacts anyone of its own accord again — not on launch, not on a timer, not ever. (If the second check can’t get through, it simply tries again once a day for up to two weeks.) There is no account, no analytics, no crash reporting and no tracking.

Those two calls send:

  • Your licence key.
  • An anonymous identifier for that Mac: a one-way hash the app makes from the Mac’s hardware ID. The hardware ID itself never leaves your Mac, and the hash can’t be turned back into it.
  • On activation only, the Mac’s name as macOS reports it (such as “Jane’s MacBook Air”), so we can tell which Mac is which if you ever ask us to move your licence.

Nothing else: nothing about what you use Exeunt for, which apps it quit, or anything on your Mac.

The only other calls it makes are ones you ask for:

  • Check for Updates, in the menu, asks this site for the latest version number. It sends nothing about you or your Mac, and it never checks by itself — not on launch, not on a timer.
  • Deactivating the licence on this Mac, when you move to a new one, sends the licence key and this Mac’s anonymous identifier, so the right Mac is released.

Like any request to a website, each of these reaches the web host’s standard access log — see server logs below.

The trial’s start date is kept in your Mac’s keychain, so reinstalling doesn’t reset it. It never leaves your Mac.

Everything it records stays on your Mac: the activity log at ~/Library/Logs/Exeunt.log and the settings file at ~/Library/Application Support/Exeunt/config.txt. Neither is ever uploaded.

Exeunt needs Accessibility permission to see when other apps’ windows close. It doesn’t read your screen, your keystrokes or your documents.

This website

A website is not an app, and this one does keep a few things. All of it is listed here.

A visitor log, kept here and nowhere else

Each time you open a page on this site, the site records:

  • Your IP address.
  • Your browser’s identification string — the text every browser sends, naming the browser, its version and your system, such as “Safari 19 on macOS”.
  • Which page, the date and time, and whether it loaded.
  • The page you came from, if your browser says (for example, a search engine or a link on another site).
  • A country, only if the web host supplies one with the request.

Why: to know how many people visit, how they find the site, which pages they read, and whether they go on to download. How long: it is kept indefinitely. It is seen only by the site’s owner, is never sold or shared, and is not combined with anything from another company. You can ask for it to be deleted — see below.

That log lives in this site’s own database. There is no Google Analytics or any other outside analytics service, no advertising, no tracking pixels, no embedded fonts from anyone else, and no third-party JavaScript.

The site has two small scripts of its own. One remembers whether you chose light or dark, in your own browser. The other pauses the demo videos when they scroll out of view, and does not start them at all if your system asks for reduced motion. Neither sends anything anywhere, and the site works with both switched off.

The videos are served from this site. There is no YouTube or Vimeo embed, so nothing reports back on what you watched or for how long.

Cookies

None. Not one, on any page you can visit, for any purpose. There is no session cookie, no consent banner to dismiss, and nothing to opt out of, because there is nothing to opt out of. (The site’s private admin area uses a login cookie, but only the site owner ever logs in there.)

If you use the light/dark switch in the footer, that choice is written to your own browser’s local storage. It stays on your device, is never sent to the server, and is not a cookie.

If you use the contact form

The site stores what you typed, so your message can’t get lost:

  • Your name, if you gave one, and your email address.
  • Your message, and the version numbers if you filled them in.
  • A one-way hash of your IP address. Not the address itself — the hash exists only to notice five submissions in an hour from the same place, and cannot be turned back into an address.

It is used to answer you and for nothing else. It is never sold, shared or used for marketing. Support messages are deleted after twelve months.

If you buy it

Payment is taken by Paddle, who are the merchant of record for the sale. They are the seller of record and they handle the payment and the tax. Their checkout collects what it needs for that — your email address, your country and, in some places, your postcode, plus your payment details — and their privacy policy covers it. Card details never touch this site: checkout runs entirely on Paddle’s systems.

The one page that loads Paddle’s checkout script is /checkout, the page Buy Now opens. No other page on this site loads anything from Paddle, so just reading the site tells them nothing.

When a sale completes, Paddle notifies this site with the transaction and a customer reference. The site then asks Paddle once for your name, email address and billing country, and keeps a copy of the order: the transaction reference, your email address and name, the amount, the country used for tax, and the dates. That copy exists so a licence can be issued and a support question answered without asking you to prove anything. The raw notification is kept for ninety days and then deleted; the order record is kept as long as tax law requires.

If you download Exeunt

The Download button records each download, so it’s possible to tell whether anyone is finding the app. Each download records:

  • The date and time, and which version.
  • Your IP address.
  • Your browser’s identification string, as in the visitor log above.
  • A country, only if the web host supplies one with the request.
  • A one-way hash of your IP address, used to count repeat downloads once. It is cleared after ninety days.

Download records are kept indefinitely, for the same reasons and on the same terms as the visitor log.

Your licence

To issue a licence and keep it working, the site stores:

  • Your name and email address, from the order, and a company name if you gave one.
  • Your licence key, its tier, and whether it is active or was refunded.
  • For each Mac it is activated on: the anonymous identifier and name described above, and the dates it was activated, last checked, and freed.
  • Sometimes, a short private note the site owner keeps against your email address — that you are a beta tester, say, or asked about a team licence — so a later conversation doesn’t start from nothing. It is never shown to anyone else, and it goes if you ask for your data to be deleted.

Why: the name is what the app shows as the licence holder; the email is how a lost key is sent again; the per-Mac records are how a licence is activated, and moved to a new Mac. None of it is used for anything else, sold, or shared.

Requests to the licence service, and to “resend my licence”, are counted against a one-way hash of your IP address to stop anyone guessing keys — the same hash the contact form uses. Those counts are deleted after a day. Licence records are kept for as long as the licence exists, because the app may need to be activated again.

Server logs

Separately from the visitor log, the web host keeps standard access logs — IP address, page requested, time — as every web server does, on its own schedule. Those are used only to keep the site working.

Asking for your data, or its deletion

Email support@exeunt.app from the address you bought with, and ask. You can have a copy of anything held here, or have it deleted. For the visitor log and download records, include the IP address you’d like removed (searching “what is my IP” shows it). Order records tied to a completed sale may have to be kept for tax purposes; anything else goes.

Deleting your licence record means the licence can no longer be activated on a new Mac. Macs that already hold a permanent licence file carry on working, because they never check with us again.

For payment data specifically, Paddle holds it and is the right place to ask.