HushtopSubprocessors
Last updated: 8 October 2026
In short
Three companies handle data for us: Paddle sells Hushtop, Cloudflare runs our servers, and Resend sends our email. Services you turn on inside the app aren’t on this list, because your Mac talks to them directly.
Who handles data for us#
| Name | Purpose | Data | Location |
|---|---|---|---|
| Paddle.com | Merchant of Record: checkout, payment, tax, invoices and refunds | Name, email, billing address, payment details, order details | Under Paddle’s privacy policy |
| Cloudflare Workers, D1 and R2 | The license server, its database and update downloads | License key hash and encrypted key, purchase email hash, Paddle order number, anonymous Mac ID, activation, trial and deactivation dates, request logs (IP address) | Cloudflare (D1 and R2) |
| Cloudflare D1 | Storing feedback so we can answer it | Your message, its type, the app version if given, your email if you gave one for a reply | Cloudflare (D1) |
| Cloudflare | Delivering and protecting this website | IP address and request details | Cloudflare’s global network |
| Our web server | Running this website and keeping Get updates sign-ups | Sign-up email, the two optional answers, the link you came from, request details | Indonesia |
| Resend | Sending license emails from [email protected], and forwarding feedback to us | Purchase email and license key (in the email), feedback message and reply email | Under Resend’s privacy policy |
Services you choose in the app#
Some features talk to a service directly from your Mac, only when you use them: Open-Meteo for the weather, LRCLIB for lyrics, ipify for Show public IP, Apple for the speed test and iCloud Reminders, GitHub, Anthropic and Telegram for the integrations you connect. We don’t receive that data, so these services aren’t our subprocessors. The privacy policy says what each one gets.
Changes to this list#
We update this page before a new subprocessor starts handling your data.
Contact#
Questions about this list: [email protected].