Legal
Privacy Policy
Last updated 2026-08-28 · Applies to shiftmask.com and the ShiftMask desktop application
The short version: the ShiftMask application itself sends nothing anywhere. It runs on your machine, reads the files you point it at, and writes its output back to your disk. There is no telemetry, no phone-home, no update check that leaks a file name. This page is about the much smaller footprint of the website and the purchase — not the product.
1. Who this is
ShiftMask is operated by Konrad Myśliński, based in Poland. [Jeżeli sprzedaż prowadzona jest przez podmiot firmowy, a nie osobę prywatną, podmień tę linijkę na pełną nazwę firmy i adres rejestrowy — ten dokument to szkic do uzupełnienia, nie gotowa porada prawna.] For anything on this page, write to konradmyslinski@gmail.com.
2. What the website collects
shiftmask.com uses GoatCounter, a privacy-first analytics tool, to count page views and see which links get clicked (for example, the download and pricing buttons). It does not use cookies, does not build a cross-site profile of you, and does not sell or share data with advertisers. It records things like: page visited, referring site, country-level location derived from IP address, and browser type — your full IP address is discarded, not stored.
GitHub, which hosts this site, also keeps its own standard server logs (IP address, requested file, timestamp) for a short period, under GitHub's own privacy statement — this is outside our control, same as for any site hosted on GitHub Pages.
3. What happens when you buy a license
Purchases are handled by Gumroad, acting as merchant of record. When you buy, Gumroad collects your email address and payment details directly — we never see or store your card number. Gumroad passes us your email address and purchase timestamp so we can issue and, if needed, help recover your license. Gumroad's own handling of your data is described in the Gumroad Privacy Policy.
4. What happens when you email us
If you write to us for support or with a question, we keep that email thread to answer you and, if it points to a real bug, to fix it. We don't add you to a marketing list from a support email — if we ever start a mailing list, it will be opt-in, separate, and easy to leave.
5. What we don't do
- We don't sell, rent or trade your data to anyone.
- We don't run advertising trackers, pixels, or cross-site ad networks on this site.
- We don't and can't see the files you process with the ShiftMask application — it never leaves your machine.
6. Your rights
If you're in the EU/EEA, UK, or a US state with its own privacy law (like California), you can ask us what we hold about you, ask us to correct or delete it, or object to how it's used. Since the only data we hold is your support-email thread and whatever Gumroad forwards us about a purchase, this is usually a quick request — email konradmyslinski@gmail.com and we'll sort it out directly rather than making you fill out a form.
7. Changes to this policy
If this changes — a new analytics tool, a new payment processor — we'll update the date at the top of this page. Given how little this site actually collects, we don't expect that to happen often.