Small product, small data footprint.

Effective October 10, 2026.

What we store

When you buy Veil, we store your email address, license status, and Polar order identifier. If you share Veil, we may also store your Dub partner identifier and share URL on the license. For activation we store a one-way identifier derived from this Mac, the hostname you provide, and activation timestamps. We never store a raw machine identifier.

Why we use it

We use this data only to issue your license, enforce the two-Mac limit, validate entitlement, deliver transactional email, process refunds, give you a referral share link, let you manage devices, and attach an optional conversion receipt while analytics is on.

Payments and email

Polar is the merchant of record and processes payment and tax data. Resend delivers license and device-management emails. Dub is a subprocessor of partner link-click and conversion data for the referral program. Their policies govern data they process for those services.

What we do not collect

Veil does not collect keystrokes, screen contents, filenames, agent activity, or browsing history. If you attach a file to a feedback message, that file is sent only after you press Send, and it may contain screen content or other information you chose to include. The website uses no advertising trackers.

Conversions and Windows notifications

While analytics is on, a random conversion receipt can connect a download, successful app use and a verified purchase. Campaign and creative IDs must be registered; advertising spend is entered manually. These receipts expire after one year. Turning analytics off removes their links and measurements. We never match customers through email, hardware identifiers or IP addresses.

Windows release notifications require your email, an explicit request and email confirmation. Resend delivers the confirmation and the requested release email. You can unsubscribe at any time. Unconfirmed and unsubscribed requests are removed after 30 days during list maintenance. Optional conversion links follow your browser’s analytics setting.

Product analytics

Product analytics measures use of the website and the Mac app. A Mac installation is included until you turn it off, whether it is new or was upgraded. For visitors from the European Economic Area, the United Kingdom, and Switzerland, the website shows a notice before any product analytics event. After the notice is shown, collection may proceed without another click. If the notice cannot be shown, the website does not collect. Elsewhere, website collection starts on the first page. Wherever you are, you can turn it off with Analytics settings at the bottom of every page, and a browser that sends Global Privacy Control starts with it off. Identifiers are pseudonymous, not anonymous. PostHog Cloud EU processes these events and keeps a profile that holds only the random identifier, with no name or email address. Events are kept until they are deleted, and at most for the retention period of our PostHog plan, which is up to seven years. There is no session replay and no autocapture.

Leaving product analytics off, or turning it off, does not reduce veiling, licensing, or restoration. The website control and the Mac control stop later events. The identifier stays on this browser or Mac so that already sent events can be deleted from PostHog. They are not deleted until a deletion request can be completed. A random analytics identifier is not matched from an email address, so emailing support does not delete it.

Your choices

You may request access or deletion by emailing support@itsveil.com. Transaction records may be retained where tax and fraud law requires it.