Privacy Policy

Effective 24 July 2026

This policy explains how personal data is handled by TidyLume, a product owned and operated by Abdullah Yilmaz.

Controller and contact

Abdullah Yilmaz
Am Bahnhof 4-12
57072 Siegen
Germany
support@tidylume.com

Files and scan results

TidyLume scans files locally on your Mac. File names, paths, scan results and cleanup selections are not sent to Abdullah Yilmaz or sold to third parties. Selected items are moved locally to the macOS Trash.

License activation

To activate or validate TidyLume Pro, the app sends the license key, a randomly generated installation identifier, product metadata and validation information to the TidyLume license service hosted on Cloudflare. Device names, file names, paths and scan results are not included. The license credential is stored in the macOS Keychain. Processing is necessary to perform the license agreement and prevent misuse.

Purchases

Stripe Managed Payments, provided as Sold through Link, acts as merchant of record and processes checkout, payment, tax, receipts, transaction support and refunds. The product owner may access order data made available in Stripe, such as customer contact details, order and refund status, where necessary for support, contract administration, fraud prevention and legal obligations. The TidyLume license service receives Stripe checkout, product, payment and refund identifiers needed to issue or revoke a license; it does not store payment card details. See Stripe's privacy policy.

Website and support

The website does not currently use advertising trackers or third-party analytics. The hosting provider may process ordinary server logs, including IP address, requested resource, time, browser information and security events, to deliver and protect the site. If you contact support, your contact details and message are processed to answer the request.

Legal bases and retention

Data is processed as necessary to perform a contract, comply with legal obligations, and pursue legitimate interests in security, support and abuse prevention. Data is retained only as long as necessary for those purposes or for mandatory legal retention periods. Local application data remains on your device until you remove it.

Recipients and international transfers

Data may be handled by Stripe/Link, Cloudflare, website hosting and infrastructure providers, and professional advisers where necessary. Some providers may process data outside the European Economic Area using an applicable legal transfer mechanism and safeguards described in their privacy notices.

Your rights

Subject to the GDPR and applicable law, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent where processing is based on consent. You may also complain to a competent data protection supervisory authority. Contact the controller using the address above to exercise these rights.

Changes

This policy may be updated when the product, providers or legal requirements change. The effective date above identifies the current version.