Privacy

What we collect

Usage counts and a small amount of non-identifying hardware detail only. Every identifier is turned into a one-way keyed hash (HMAC-SHA-256) inside the server before it is stored, and the raw identifier is discarded. Hardware fields describe a machine, never a person, and are used only in aggregate.

• App: a random install identifier (hashed), app version, macOS version, CPU architecture, CPU model name, physical and logical core counts, performance and efficiency core counts, physical memory size, and daily counts of launches, downloads started and downloads completed.
• Chrome extension: a random install identifier (hashed), extension version, browser name and version, OS name and version, CPU architecture, CPU model name, logical core count, memory capacity, and daily counts of handoffs and popup opens. CPU model and exact memory capacity are reported only when Chrome exposes them through its system APIs; otherwise we store the browser-reported processor count and approximate device memory.
• Website: a random visitor identifier stored in your browser's local storage (no cookie), a daily-rotating hash derived from it, browser name and version, OS name, desktop/tablet/mobile, and counts of page views, download clicks and extension clicks.
• Network: the request IP address. It is stored in a separate IP history table, linked only to the hashed anonymous client/visitor identifier, and is never included in public statistics. It is used for abuse prevention and basic network diagnostics.

What we never store

• Raw user-agent strings, Referer, cookies, or advertising identifiers. The request IP is retained only in the separate IP history table described above; it is never written into the daily analytics rows or public aggregates.
• URLs, paths, query strings, filenames, or the content of your downloads.
• Account details, email, names, hostnames, usernames, device serials, MAC addresses or hardware UUIDs.
• We do not sell data, run ads, or build profiles.

Why we collect it

To count installs and active users, see which versions are deployed, and understand whether downloads and browser handoffs succeed. Nothing else.

Retention

Raw daily rows and IP history are deleted automatically after 180 days (IP history by last-seen day). Only aggregates (per-day totals per product) are kept longer, and those contain no identifiers of any kind.

Public aggregate statistics

We may publish aggregate numbers such as installs, active users, downloads and page views. Published statistics are totals only; they never include identifiers, hashes or per-visitor data.

Opting out

• App: analytics are enabled by default and can be switched off at any time in the app's Settings.
• Chrome extension: analytics are anonymous daily counts sent directly by the extension. There is no switch — installing the extension means those counts are sent.
• Website: we respect Global Privacy Control (GPC) and Do Not Track (DNT). The site uses a local visitor identifier in browser storage; clearing this site's storage stops the identifier and subsequent website analytics.

External links

This site links to GitHub. Following a link takes you to a third-party site governed by its own privacy policy; we do not control it.

No sale of data

We do not sell, rent or share analytics data with third parties, and there are no trackers, advertising pixels or third-party analytics scripts on this site.

Contact

Questions or requests: open an issue at github.com/xhat/nifty/issues.

Disclaimer

This page describes our practices in plain language. It is not legal advice and does not create any contractual or statutory rights.