How we handle your data.

Google Analytics on this website

This website uses Google Analytics 4 to understand how people use its pages. Information about page visits, interactions, and your browser or device may be sent to Google. Analytics cookies may be used to measure website activity.

Website analytics is separate from the offline Mac workspace. The website’s Google tag does not read research files from your desktop app. You can browse this site and try the demo without creating an account.

Google Analytics is excluded from the private purchase page. License keys, private order access tokens, and demo draft contents are not sent through custom analytics events.

Loading a website still sends a normal web request to the server hosting it. The hosting environment may process connection information, such as an IP address and requested URL, to deliver the page. That is separate from the data you type into the demo.

Stripe purchases and order access

Hackstat’s operator is the seller. Stripe processes checkout and payment details. Hackstat uses Checkout Session, payment, and customer identifiers, your purchase email address, the purchased price, and payment status to confirm your order, provide a license, and deliver purchase information. Supabase stores orders, license records, device activations, webhook events, and email delivery status. The administrator dashboard shows operational and device details; customer registration codes and signed certificates are not displayed there. Stripe handles the payment information you enter in its checkout under its own privacy practices.

Historical purchases processed by Paddle retain their original payment provider and order records. Their payment information remains subject to Paddle’s privacy practices.

Your private order link contains an access token. The purchase page removes that token from the address bar and can retain order access in this tab’s session storage so you can refresh the page. Keep the link private: anyone with it can access your order and available downloads.

License keys are sent through Resend to the email used at checkout; they are not displayed on the website. The purchase page shows whether the email is sent, pending, delayed, or unavailable. Sent means accepted by the email provider.

Activating your Mac license

One license activates one Mac. The initial online activation validates your purchase and binds the license to that Mac. Licensing records include a hash of the license key, a SHA-256 hash of the Mac’s platform UUID, its serial number and model, macOS and app versions, the signed activation certificate, and activation and verification times. Device information helps enforce one Mac per license and investigate failed activations. The raw hardware UUID stays on the Mac. Serial numbers and device records are restricted to administrators; serial numbers are masked in the dashboard until expanded.

After activation, the app can use its signed certificate while offline. Purchase or license changes cannot instantly reach an offline Mac; changes such as revocation are applied when the app successfully verifies online again. The app checks at launch, on resume, and periodically while running. A connection failure does not remove a valid offline license. No device reset or transfer interface is currently available on this website.

Local browser storage

The site uses your browser’s local storage for your selected appearance so the light or dark theme can be remembered on your next visit.

If you explicitly save a draft in the metadata demo, that draft is also kept in local storage on this browser. Local storage is not an account, a cloud backup, or a way to sync between computers.

Someone using the same browser profile may be able to see saved drafts. Avoid saving sensitive research on a shared computer.

Demo data and exports

The keyword lists and ranking metrics shown in the demo are sample data. Search, view changes, metadata editing, and exports run in your browser.

The demo does not submit draft text to an application backend. No custom analytics events send the contents of your drafts. There is no connected App Store account, no live ranking request, and no server-side database storing your demo work.

Exported CSV files are generated in your browser and saved through its normal download behavior. Once downloaded, you control where those files are stored and shared.

Clear your saved data

To remove the site’s saved theme preference and any saved metadata draft, open your browser’s privacy or site settings, find this site, and clear its stored site data. You can also manage or block analytics cookies through your browser’s cookie settings.

On the purchase page, “Use a different order link” clears the order access saved in this tab. Clearing browser storage does not delete payment records or deactivate a purchased license.

Clearing site data returns the demo to its initial state. It does not remove CSV files you have already downloaded; delete those from your downloads folder if you no longer need them.

Private browsing and browser storage restrictions may prevent preferences or drafts from being retained. You can still explore the sample workspace.

Desktop data storage

Hackstat stores saved listings, keyword observations, ranking history, and notes in a local database on your Mac. Purchase and license records are held separately by the online licensing service. Your ASO workspace is not synced to that service.

New listing lookups and ranking checks send the relevant app, keyword, and locale requests to the public Apple or Google sources. The optional autocomplete signal also queries Google. These requests need internet; reviewing saved research does not. The product direction page explains current capabilities and planned improvements.

When the Mac download is available, the release documentation will explain local file locations, backups, and any optional connections before you use them.