Legal
Privacy.
No account, no telemetry, no cookies. Here is the complete list of what we do handle, and why.
Last updated 2026-11-02
Who is responsible
Matheus Meirelles da Silva, an individual trader established in Lisbon, Portugal (NIF 334861721), is the data controller for this website and the licensing service. Questions: contact@doomscrolling.sucks.
The tools on your Mac
Recess runs entirely on your Mac. It has no account, sends no telemetry, no crash reports and no usage data, and makes no network requests, with two exceptions. The first is license activation, when you paste a key and click Activate. That request sends:
- the license key;
- a SHA-256 hash of your Mac's hardware UUID (never the UUID itself), so one license activates one Mac at a time;
- your Mac's name as set in System Settings, so you can tell your Macs apart;
- the app version.
The answer is a signed token the app checks offline from then on. Deactivating a Mac deletes its activation record. Your blocklist, schedule and password never leave your Mac; the password is stored only as a hash, readable only by the system service.
The second is a daily update check: once a day the app fetches https://doomscrolling.sucks/recess/latest.json to learn whether a newer version exists. That request carries nothing but the app's version in its User-Agent header (for example Recess/1.0.0): no identifier, no settings, no usage. Cloudflare sees the connection the way it sees any visit to this site, and we store nothing from it. You can turn the check off in Settings.
Buying a license
Checkout is run by Stripe, which sells to you as merchant of record under its Managed Payments programme and processes your name, email, billing address, payment details and location for payment, tax and fraud prevention under its own privacy policy. Stripe also sends you the receipt and invoice itself (from Link). We receive your email address, the order id and the payment status; we never see your card number. We store the email, the license key and Stripe's order ids in our licensing database for as long as the license exists, so that we can resend keys, honour refunds and detect abuse.
Emails we send
- License emails (your key after purchase, and recovery emails you request) are sent through Resend from licenses@doomscrolling.sucks.
- License recovery stores the requesting address, a hashed one-time token and timestamps for 24 hours, to limit requests to three per address per day.
- The waitlist stores the email you submit in Resend until the launch announcement has been sent, or until you unsubscribe with the link in any email. We send no other marketing.
- Support: emails to contact@doomscrolling.sucks are kept as long as needed to help you and for a reasonable time after.
This website
- Hosted on Cloudflare, which processes connection data (IP address, request headers) to serve and protect the site and keeps short-lived logs. Forms are rate-limited by IP address; no IP addresses are stored by us.
- Visits are measured with Cloudflare Web Analytics, which is cookieless and does not fingerprint or track you across sites. That is why there is no cookie banner: there are no cookies to consent to.
- The site sets no cookies and loads nothing from third parties, except that clicking "buy" takes you to Stripe's checkout page, which has its own privacy policy.
Where data lives, and who sees it
The licensing database runs on Supabase (hosted in the European Union). Stripe, Resend, Supabase and Cloudflare process data on our behalf under their own terms; they do not get to use it for themselves. We don't sell or share personal data with anyone else, and we don't run advertising.
Your rights
Under the European GDPR and similar laws elsewhere (such as the Brazilian LGPD), you can ask what we hold about you, have it corrected or deleted, object to its use, or receive a copy. Email contact@doomscrolling.sucks from the address in question. Deleting a license record means the license can no longer be activated. You can also complain to your local data protection authority; ours is the Portuguese CNPD (cnpd.pt).
Changes
If we ever collect more than this page lists, this page changes first, with a new date at the top.
Seller: Matheus Meirelles da Silva, Lisbon, Portugal. NIF 334861721. Contact: contact@doomscrolling.sucks.