Legal

Privacy Policy

Last updated 2026-09-22 · Applies to shiftmask.com and the ShiftMask desktop application

The short version: the ShiftMask application itself sends nothing anywhere. It runs on your machine, reads the files you point it at, and writes its output back to your disk. There is no telemetry, no phone-home, no update check that leaks a file name. This page is about the much smaller footprint of the website and the purchase — not the product.

1. Who this is

ShiftMask is developed and published by 4optima Sp. z o.o., ul. Wydmowa 4, 05-092 Łomianki, Poland (KRS 0000544621, NIP 1182105589, REGON 360833570). The company is the data controller for the personal data described on this page. Full registration details are on the legal page. For anything here, write to shiftmask@4optima.pl.

2. What the website collects

shiftmask.com uses GoatCounter, a privacy-first analytics tool, to count page views and see which links get clicked (for example, the download and pricing buttons). It does not use cookies, does not build a cross-site profile of you, and does not sell or share data with advertisers. It records things like: page visited, referring site, country-level location derived from IP address, and browser type — your full IP address is discarded, not stored.

shiftmask.com also offers Google Analytics (GA4) to understand traffic and which pages and links lead to downloads or purchases — but only if you say yes. On your first visit, a banner asks whether to turn it on; until you click Accept, the Google Analytics script is never loaded and nothing is sent to Google. If you accept, Google Analytics sets first-party cookies in your browser and sends data — pages viewed, referring site, approximate location, device and browser type, and on-page interactions like scrolls and outbound clicks — to Google. We have not enabled Google Signals or ad personalization features. Your choice is stored only in your own browser (not on our servers), and you can change it anytime via the "Cookies" link in the footer. Google's own handling of this data is described in the Google Privacy Policy and the Google Ads Data Processing Terms that apply to Analytics.

GitHub, which hosts this site, also keeps its own standard server logs (IP address, requested file, timestamp) for a short period, under GitHub's own privacy statement — this is outside our control, same as for any site hosted on GitHub Pages.

3. What happens when you buy a license

Purchases are handled by Lemon Squeezy, acting as merchant of record. That means Lemon Squeezy, not 4optima, is the seller on your receipt: it collects your email address and payment details directly, and we never see or store your card number. Lemon Squeezy passes us your email address, country and purchase timestamp so that we can issue your licence and, if needed, reissue it when you change computers. Its own handling of your data is described in the Lemon Squeezy Privacy Policy, and the terms of the sale itself in the Buyer Terms.

Your licence token is generated by a Cloudflare Worker we operate. It records the order identifier, the email address the licence was issued to and the device identifier you activate with — which is what lets us reissue a licence to the right person. The ShiftMask application never contacts it. Activation happens offline, by verifying a signature on the token itself.

4. What happens when you email us

If you write to us for support or with a question, we keep that email thread to answer you and, if it points to a real bug, to fix it. We don't add you to a marketing list from a support email — if we ever start a mailing list, it will be opt-in, separate, and easy to leave.

5. What we don't do

6. Your rights

If you're in the EU/EEA, UK, or a US state with its own privacy law (like California), you can ask us what we hold about you, ask us to correct or delete it, or object to how it's used. Since the only data we hold is your support-email thread, what Lemon Squeezy forwards us about a purchase and the licence record tied to it, this is usually a quick request — email shiftmask@4optima.pl and we'll sort it out directly rather than making you fill out a form.

7. Changes to this policy

If this changes — a new analytics tool, a new payment processor — we'll update the date at the top of this page. Given how little this site actually collects, we don't expect that to happen often.