Privacy
As of 29 October 2026.
Macarun collects as little as it can. Your CI jobs, source, logs and secrets stay on your Macs and never reach us.
Who we are
Bc. Jiří Charvát, a sole trader registered in the Czech trade register, IČO 01259172, Nové sady 988/2, 602 00 Brno. For anything on this page, write to hello@macarun.dev.
This site
No cookies and no trackers, and nothing loaded from anyone else except Paddle's checkout on the buy page. bunny.net (BunnyWay d.o.o., Slovenia) serves the site and logs each request: IP address, page, time, browser and referring page. We use the logs to keep the site running and to count visits from the links we post (legitimate interest, Article 6(1)(f) GDPR). They are kept for three days.
Buying
Paddle (Paddle.com Market Limited, UK) sells Macarun as merchant of record. It collects your billing and payment details as its own controller, under its privacy notice. We receive your Paddle customer ID and the state of your subscription, and keep them while your team exists, to deliver what you bought (Article 6(1)(b) GDPR).
Using Macarun
When you connect a Mac or an app to your team, our control plane stores your team's name, the names of its devices and hosts, their state, and your licenses, to run the fleet view, the apps and licensing (Article 6(1)(b) GDPR). What our servers hold lists every item and how long it is kept. The control plane runs at Hetzner in Germany, with encrypted backups at Scaleway in France and the Netherlands.
The iPhone app's notifications go through Apple's push service, which receives a token for your device and each notification's text. If you share analytics with app developers in your iPhone's settings, Apple gives us aggregated figures that do not identify you.
When you write to us, including as a beta tester, we keep the conversation in our mailbox at mailbox.org (Germany) to answer you, and delete it two years after our last exchange. We send no newsletters.
Who else sees it
Only the services named above, each for its own part. Everything is stored in the EU, except Paddle, in the UK, which has an EU adequacy decision, and Apple's push service. bunny.net may serve and log a request from an edge server outside the EU, under its data processing agreement with us. We do not sell personal data or use it for advertising.
Your rights
You may ask for a copy of your personal data, and to correct it, delete it, restrict or object to its use, or receive it in a portable form. Write to hello@macarun.dev and we answer within a month. Deleting your team deletes its data from the control plane; what our servers hold says what remains for a while and why. You may also complain to the Czech data protection authority (uoou.gov.cz) or to the one where you live.
Changes
When this notice changes, so does the date at the top. Changes that affect customers are announced to them by email first.