Privacy Policy

1What we never receive

Slash keeps your content on your devices, in the data folder you choose. None of it is sent to us:

• Notes, tasks, reminders, clips, bookmarks and timers
• Clipboard (Paste) and screenshot history
• AI Chat conversations, which run on models on your Mac
• Pages you visit in the built-in browser
• Files you send with Drop and what you control with Deck, which travel only between your own devices on your local network or cable
• Your preferences and shortcuts

If you put your data folder in a cloud drive or a Git host, that provider processes it under its own privacy policy. See the Terms of Service for your responsibilities.

2What we collect

Only when you sign in, buy a licence or use the website:

• Account: your GitHub user id, username, name, public email and avatar URL, and when you created your account and last signed in. We don't keep your GitHub password or a GitHub access token for sign-in.
• Licence and purchases: your tier and seats, Polar checkout and order ids, amount, currency, date and refund status, and the GitHub username of whoever gave you a gift. Payment details go to Polar; we never see your card.
• Your Macs: for each Mac you sign in on, a device id (a one-way hash of the hardware id, so it can't be traced back), the computer's name, model, macOS version and Slash version, and when it was added and last seen. We use this to count seats. You can remove a Mac from your dashboard.
• Roadmap (optional): if you choose to vote or post on the roadmap, a GitHub token for Discussions, kept encrypted in a cookie in your browser and used only to act on GitHub on your behalf.
• Socket (only if you use it): the sockets you define, the Vercel or Cloudflare connection you add (its token encrypted), the domains you set up, and your Mac's public IP address so its DNS record keeps pointing at it.
• Technical logs: requests to slash.tools, including the app's update checks, are logged by our hosting provider with IP address, browser or app details and time, for security and to keep the service running.

3Cookies and local storage

slash.tools uses a sign-in session cookie, a short-lived cookie while you sign in, the optional roadmap cookie above, and local storage for your light or dark theme. We don't use analytics, advertising or tracking cookies.

4Requests the app makes to other services

A few features fetch things from other services directly from your Mac. They see your IP address and the request, under their own privacy policies:

• Website icons come from DuckDuckGo's icon service, which receives the website's domain.
• Weather in the Dock comes from Open-Meteo, which receives the city you set, or your approximate location if you allow it.
• Link previews in Paste are fetched from the linked website.
• The built-in browser loads the websites you visit, and searches go to your search engine.

5Who processes data for us

We use a small number of providers, only to run Slash:

• Vercel, to host slash.tools
• Upstash, to store accounts, licences and devices
• Polar, to take payments as merchant of record
• GitHub, for sign-in and the roadmap
• Vercel and Cloudflare DNS, only if you connect them to Socket

Some of them process data in the United States. Where the law requires it, transfers are covered by safeguards such as the EU Standard Contractual Clauses.

6Why we use it

We use this information to provide your account and licence, check seats, process purchases and refunds, publish your Socket domains, prevent fraud and abuse, answer support requests, and meet legal and tax obligations. Under the GDPR our legal bases are performing our contract with you, our legitimate interest in keeping Slash secure and working, legal obligations, and your consent for the optional roadmap token. We never sell your data or use it for advertising.

7How long we keep it

Account, licence and device information is kept while you have an account. Purchase records are kept as long as tax and accounting law requires. A Mac's record is deleted when you remove it. Technical logs are kept only briefly by our hosting provider.

8Your rights

You can ask to see, correct, export or delete the information we hold about you, or object to how we use it, by emailing privacy@slash.tools. We'll reply within one month. Deleting your account removes your profile and devices; we keep purchase records only where the law requires.

You can also complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), or to the data protection authority where you live.

9Security

All traffic to slash.tools is encrypted, and stored tokens are encrypted at rest. The security of the data on your devices, and of any folder or service you keep it in, is in your hands.

10Children

Slash isn't directed at children under 16, and we don't knowingly collect their information.

11Changes to this policy

If we change this policy, we'll update the date at the top and tell you in the app or by email before an important change takes effect.

12Contact

Questions or requests about your data? Email us:

privacy@slash.tools

• Security issues: security@slash.tools
• Help using Slash: support@slash.tools