Privacy

What we handle

• Your email address — used once, to deliver your license or trial key. Emails are sent via Resend.
• Payments — handled entirely by Stripe. Your card details go to Stripe, never to us; we never see them.
• Bot check on the trial form — the trial form uses Cloudflare Turnstile to keep bots out. When you request a trial key, Cloudflare processes the challenge (your IP address and browser signals) and may set its own cookie or local state for that check.
• Server logs — the site is hosted on Vercel, which keeps standard server logs.
• Update check — once a day the desktop app requests https://grepfocus.com/downloads/latest.json to learn the newest version. It is a single HTTPS GET with no query string, no cookies and no body. The app version travels in its User-Agent (GrepFocus/<version> (linux)) and, like any web request, your IP address and the time of the request reach our hosting provider (Vercel) under its standard logs. No identifier, license key, or block or usage data is sent. Only the version number is exchanged and nothing is downloaded — the app reads the version and never fetches an installer on its own. It explains this on first launch, before its first check, and you can turn it off in Settings.

What we don't have

• No accounts and no customer database.
• No telemetry and no analytics. The daily update check above is the only request the app makes, and it carries nothing but the version number.
• No cookies from us — the only cookies involved are the ones Stripe Checkout itself uses on stripe.com and whatever Cloudflare's Turnstile widget sets for its bot check on the trial form.
• The app verifies your license offline (Ed25519 signature check, on your machine). There is no activation server.
• The browser DNS-over-HTTPS policy files the app installs so blocks apply are a local file change — no network is involved.

Data removal

Want something deleted? Email support@grepfocus.com and we'll take care of it.