Privacy Policy

Last updated: October 22, 2026

This policy explains what data ActionPock (“we”, “us”) processes, why, how long we keep it, and the choices you have. It covers the ActionPock Windows app, this website (actionpock.com), and the licensing services behind them, which we refer to together as the Service.

ActionPock is designed to be local-first. The app works without an account, and the things you create with it stay on your PC. Only the limited licensing, payment, email, and — if you switch it on — anonymous statistics processing described below ever involves data leaving your computer. We do not sell personal data, and we do not use it for advertising.

1. What stays on your PC

The following never leaves your computer and is never uploaded to us:

• Your saved actions and workflows, including their names and contents
• Text snippets, memo contents, and checklists
• CMD and PowerShell scripts you save, and their output
• Files and folders your Open actions point to
• Your groups, ordering, hotkeys, settings, and window layout

These are stored together in a local database (app.db) in the app's data folder on your PC. Running an action may open websites or apps you chose — those services handle whatever you do there under their own policies, not ours (see section 10). You can remove all local data by uninstalling ActionPock and deleting its data folder.

2. Personal data we collect

Data you provide to us

• Purchase email. When you buy a license, you provide an email address at checkout. We use it to deliver your license key, link the purchase to your license, and let you recover the key later.
• Activation details. When you activate in the app, you enter your purchase email and license key. The key is sent to our licensing backend over an encrypted connection so it can be checked; our servers store only a salted hash of the key, never the key itself.
• Recovery and device-management requests. If you use Recover license or Manage license, you provide your purchase email and a 6-digit code we email you. Codes are stored only as salted hashes and expire quickly.
• Messages you send us. If you contact us by email, or through the app's Send Feedback — which opens the feedback page on this website — we receive what you choose to write, plus any email address you leave for a reply. When the page is opened from the app, it arrives with app details (app version, release channel, plan, and Windows version) that are shown on the page; you can untick them before sending. Nothing else is attached — no screenshots, logs, saved actions, PC name, or installation ID.

Licensing and device data

To activate licenses, enforce per-plan device limits (3 or 10 PCs), and show you your activated devices, the app and backend process:

• Installation ID — a random identifier created on your PC the first time the app runs. It identifies the installation, not you.
• Hardware fingerprint — a short one-way hash derived from your machine's characteristics. We receive the hash, not the underlying values, and use it to recognize the same PC across reinstalls.
• Device display name — your PC's Windows computer name, so the device list in the License page and portal shows names you recognize.
• App version, release channel, and trial start, plus the license record itself: plan, entitlement state, activation and validation times, and which installations are activated.

License validation happens online roughly once a day while the app is in use. Requests from the app are cryptographically signed by a device key that never leaves your PC, so activations cannot be forged or replayed. If you are offline, the app keeps working from its last confirmed state — licensing never blocks your saved actions.

Payments

Purchases are processed by Stripe. Your card details go to Stripe, not to us: we never see or store full card numbers. We receive payment confirmations and keep the records needed to run licensing — checkout session and payment identifiers, plan, amount, currency, and the purchase email — including records of refunds and charge disputes so license state matches payment state.

Optional usage statistics (off by default)

ActionPock only sends usage statistics if you turn on Share usage statistics in Settings → Privacy. If you do, we receive:

• An app open event with your installation ID, app version, release channel, and entitlement state (trial, free, or licensed).
• A once-daily count of how many top-level actions and workflows you have, and how many times they have run in total.

That is all. Statistics never include action or workflow names, contents, scripts, memos, files, websites, keystrokes, or anything you type. You can turn sharing off at any time in Settings, and no further events are sent.

Data collected automatically on the website and backend

• Security and rate-limiting data. Our servers process request metadata such as source IP address and timestamps on a transient basis to prevent abuse (for example, limiting repeated activation, login, or code requests) and to keep an audit trail of security-relevant events such as activations, device removals, and administrative actions.
• License portal sessions. After you verify the 6-digit email code, the portal holds a short-lived access token in the page so you can view and remove your devices. It is not stored in cookies or persistent browser storage.

3. How we use personal data

• To provide the Service — activate and validate licenses, enforce device limits, deliver keys, process purchases, refunds, and recoveries, and let you manage devices.
• To communicate with you — send license keys, recovery codes, and replies to messages you send us. We do not send marketing email.
• For security and fraud prevention — detect forged or replayed activation requests, failed payment abuse, and unauthorized administrative access.
• For product improvement — only from the optional, anonymous statistics described above, in aggregate form.
• For legal compliance — keep payment and transaction records as required, and respond to lawful requests.

4. Sharing and service providers

We share personal data only with the providers needed to run the Service, and only for the purposes above:

We may also disclose data if required by law, or to protect our or others' rights and safety. If ActionPock is ever sold or merged, license and purchase records may transfer to the new owner under the same commitments. We never sell personal data or share it for interest-based advertising.

5. Cookies and browser storage

This website does not use advertising, analytics, or tracking cookies. The only cookie we set is a strictly necessary, HTTP-only session cookie for the administrative sign-in area, which you will only encounter if you administer the site; it is deleted when you sign out. The license portal keeps its access token in page memory only, as described in section 2.

6. How long we keep data

• License and activated-device records — kept while your license exists, so activations, device limits, and key recovery keep working. Ask us to delete them (section 8) and we will remove what we are not required to keep.
• Payment records — kept as long as needed for accounting, refunds, disputes, and legal obligations; Stripe keeps its own records under its policy.
• Verification codes, portal sessions, and anti-replay records — deleted about a day after they expire.
• Optional statistics — raw events are deleted after 90 days; anonymous daily aggregates (counts with no identifiers) may be kept indefinitely.
• Security audit events — kept for one year.
• Feedback messages — kept for 180 days so we can follow up and spot recurring problems, then deleted.
• Data on your PC — stays until you delete it or uninstall; we cannot delete it for you because we never receive it.

7. Security

We protect licensing data with encrypted connections, salted hashing of license keys and verification codes, cryptographically signed device requests using keys that cannot be exported from your PC, short-lived sessions and codes, rate limiting, and restricted administrative access. Payment data is handled by Stripe's PCI-compliant systems. No system is perfectly secure, but we work to keep the data we hold to the minimum this section describes.

8. Your rights and choices

• Statistics opt-out. Turn off Share usage statistics in Settings → Privacy at any time; sending stops immediately.
• Device management. View and remove activated PCs in the app's License page or the Manage license portal, freeing slots for new machines.
• Local data. Delete everything the app stores by uninstalling and removing its data folder.
• Access, correction, and deletion. You may request a copy of the personal data we hold about you (essentially your license and purchase records), correction of anything inaccurate, or deletion. Email privacy@actionpock.com from your purchase email address so we can verify the request. Depending on where you live, you may also have rights to object to or restrict processing; contact us and we will honor applicable law.
• Complaints. If we cannot resolve a concern, you may complain to your local data protection authority.

9. International transfers

Our providers (Google Cloud, Stripe, Brevo) may process data on servers in the United States and other countries, which may have different data protection laws than yours. Where required, transfers rely on standard contractual safeguards offered by those providers.

10. Third-party apps and websites

Actions you create can open websites, files, and other apps, and Run buttons can execute your own scripts. What those websites, apps, and commands do is governed by their own terms and policies, not this one. Only run scripts and commands you understand and trust.

11. Children

The Service is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

12. Changes to this policy

If we change how data is handled, we will post the updated policy on this page and change the date at the top. Material changes to what the app sends (for example, any change to the optional statistics) will also be noted in the app.

13. Contact us

Questions or requests about privacy: privacy@actionpock.com. Product help: support@actionpock.com. License delivery and recovery mail comes from license@actionpock.com; the self-service Recover license page is usually fastest, and device questions are covered on Manage license.