Join the waitlist

Privacy notice

Last updated: 3 October 2026

Controller. Ben Barkai, Business ID 22073264, at the address in Terms, is responsible for personal data handled by sidelet's account and website services. Contact support@sidelet.app for privacy requests.

Local work. sidelet's everyday tools process your work on your Mac. The website does not receive clipboard contents, documents, screenshots, continuous system activity or other local work just because you use the app. A support attachment is a separate action you choose. Future cloud features would require a separate description before use.

Account and access data. We process your email, chosen name, Argon2id password hashes where a password is set, optional linked sign-in provider identity, sessions, plan, account membership, device names, installation keys, app/macOS version and access dates to provide accounts and licensed access. We retain a keyed, pseudonymous hardware identifier and limited trial/replacement history to prevent repeated trials and license sharing. It is not your serial number or network MAC address. This identifier can still relate to a person and is treated as personal data.

Payments. Stripe processes payment details and recurring billing. sidelet stores provider references, invoices, amounts, periods and billing status. Full payment-card details do not pass through our server. Billing data is used to perform the contract and meet applicable record-keeping obligations.

Email. Resend delivers sign-in, security, account and billing messages. Launch updates require your recorded choice and email verification. Newsletter consent is separate and off by default. You can unsubscribe from optional messages; essential account or billing messages may still be necessary.

Beta testing. If you apply to test sidelet, we process what you enter in the application: your name, email, age range, the Mac you would test on (kind, model, chip, memory, macOS version and displays), whether you use Discord and your Discord username if you give it, what you are happy to help with, the tools you are most interested in and any note. We use it only to pick testers with a mix of Macs and to contact you about testing; the legal basis is taking steps at your request. If you are not signed in, we first email you a link to confirm your address, and unconfirmed applications are deleted after 7 days. Applications that are not picked, and those of people whose testing has ended, are deleted 12 months after the last change. A picked tester gets complimentary Solo on one Mac while testing. If you give a Discord username, our bot looks for that username on the sidelet Discord server and gives it the tester role; we keep your Discord user ID so we can take the role back when your testing ends or your application is deleted. Discord is a separate, optional service with its own terms and privacy policy. You can ask us to delete your application at any time.

Approximate country. Cloudflare identifies the country of your connection. We use it to display prices in the appropriate currency and save the first known country with your account or waitlist entry to understand which countries people are joining from. This is an approximate country, not your precise location, and we do not store your raw IP address for this purpose.

Security and operation. Limited request metadata, hashed network identifiers, failure events and audit records support fraud prevention and service security. We do not sell your personal data. We do not collect per-action app analytics by default. The website uses no advertising cookies. Optional analytics follows the country policy and your browser choices described below.

Improving the website. When we compare two versions of a page, the website picks the version you see from a one-way hash of your network address and browser name. Neither is stored and no cookie is set; we keep only daily totals of how many people saw and used each version. When you open the website through one of our short links, such as sidelet.app/x, we add one to a daily count for that link, and one more if you then join the waitlist. No cookie is set and nothing is stored with your email.

Website analytics and cookies. The website uses Google Analytics 4, provided by Google Ireland Limited, to understand which pages help and whether steps such as joining the waitlist work. We use the current country supplied by our trusted Cloudflare connection to decide whether analytics requires a prior choice. In countries where we require consent, nothing from Google loads until you choose Accept, and Reject is as easy as Accept. In the United States, Australia, New Zealand and Switzerland, our limited website analytics is on by default unless you have rejected it or your browser sends a Global Privacy Control or Do Not Track signal. A notice in the footer explains how to turn it off; the cookie banner does not open automatically there. For other or unknown countries, we ask first. Automatic operation is a geographic default, not a record that you clicked Accept.

When analytics is enabled, it sets first-party cookies (_ga and _ga_ followed by an ID) lasting up to 13 months and sends Google the pages you view, events such as joining the waitlist, your browser and device type, and approximate location. We remove query strings and fragments from the page and referrer URLs supplied to Analytics, retaining only limited campaign tags separately. Google signals, advertising features and ad personalisation are disabled by our website code. An Accept choice lasts 12 months; a Reject choice remains until you change it or clear your browser storage. You can change either choice at any time with Cookie settings at the bottom of every public website page. Reject stops analytics, deletes its first-party cookies and reloads a page that was already running analytics so Google's automatic listeners also stop. This does not delete measurements already sent to Google. Necessary sign-in and security cookies continue to work. Google may process analytics data in the United States under the EU–US Data Privacy Framework.

Providers and transfers. Our website, database and file storage run on servers we control, hosted by Hetzner Online GmbH in Nuremberg, Germany. Cloudflare, Inc. provides DNS, encryption and network protection for sidelet.app and processes connection data such as IP addresses. Stripe Payments Europe, Ltd. (Ireland) processes payments, and Resend, Inc. (United States) delivers our emails. Emails you send to support@sidelet.app are stored by Migadu-Mail GmbH (Switzerland), and we read and answer them in Missive (Canada); the European Commission recognises both countries as providing adequate protection. Google or Apple provides identity information only if you choose that sign-in, and Google Ireland Limited provides website analytics when it is enabled under the country policy and your choices described above. Cloudflare, Stripe and Resend may process data in the United States or other countries outside the European Economic Area. These transfers rely on the EU–US Data Privacy Framework where the recipient is certified, or on the European Commission's Standard Contractual Clauses in the provider's data processing terms.

Retention and your rights. We retain data only for the stated purposes and applicable legal periods. You can request account access/export, correction, deletion, restriction or object to relevant processing; portability and other rights apply where their conditions are met. You may complain to the Czech Office for Personal Data Protection or another competent supervisory authority. Some invoice or necessary dispute/security records may need to remain after account deletion. Deleting your account does not remove data kept locally by your Mac. Contact support if you need help exercising a right.