Privacy Policy

Scope and controller

This policy explains how Throttlr ("we", "us", or "our") processes personal data through the Throttlr website, macOS app, licensing API, waitlist, and customer support. Throttlr is the controller of the personal data it processes for these purposes. Polar separately acts as merchant of record and controls the payment data it processes at checkout.

Contact us about this policy or our use of personal data at support@throttlr.app.

Personal data we process

• Licensing and device data: an installation identifier and credential, the Mac hardware identifier, device name, platform, app version, license status, trial dates, and Polar customer, subscription, license, and activation identifiers. When you activate a paid license, the full license key is transmitted to our licensing API and Polar for validation. We store the installation credential and hardware identifier in hashed form and retain only a masked version of the license key.
• Purchase and subscription data: Polar sends us purchase, customer, subscription, and license lifecycle events needed to maintain your entitlement. We retain the event payloads Polar sends to our webhook endpoint, which may include your Polar customer identifier, email address, and related purchase or subscription data. We do not receive or store your complete payment-card number.
• Waitlist and support data: your email address when you join the waitlist, and the information you include when contacting support.
• Request and security data: your IP address is temporarily processed in short-lived rate-limit records to protect the website and licensing API from abuse. Our waitlist database does not attach your IP address or browser user agent to your signup. Hosting and network providers may also process ordinary server request data to deliver and secure their services.
• Download events: when you click a download button, we record an anonymous event with the time of the click. We do not attach an IP address, user agent, browser identifier, installation identifier, or another identifier that could link the event to an individual.

Network traffic stays on your Mac

Throttlr processes network traffic locally on your Mac to monitor traffic and apply throttling or blocking controls. We do not transmit traffic contents, browsing activity, or per-app traffic statistics to Throttlr servers. The app stores settings, application identifiers, and aggregate runtime information such as byte and flow counts locally on your Mac so it can display and enforce your configuration.

How and why we use personal data

• Contract: to provide trials and paid features, validate and activate licenses, enforce seat limits, restore access, process deactivations, and provide customer support.
• Legitimate interests: to secure our services, limit abusive requests, investigate invalid or fraudulent activations, diagnose failures, and maintain reliable licensing records. These interests help us operate and protect Throttlr without using personal data in ways that override your rights.
• Consent: to retain your email for waitlist communications. You may withdraw that consent at any time by contacting us.
• Legal obligations: to comply with applicable law, respond to lawful requests, and maintain records where legally required.

Recipients and service providers

We disclose personal data only as needed to:

• Polar: our merchant of record and licensing provider. Polar handles checkout, billing, tax, fraud prevention, subscriptions, and license validation under its Privacy Policy.
• Infrastructure providers: providers of website and API hosting, databases, rate limiting, file delivery, security, and customer email or support services process data on our behalf to operate Throttlr.
• Legal and safety recipients: courts, regulators, law enforcement, or other parties when disclosure is required by law or reasonably necessary to protect rights, safety, and service integrity.

We do not sell personal data or use it for targeted advertising.

International transfers

Throttlr and its service providers may process personal data outside the European Economic Area or United Kingdom, including in the United States where Polar operates. When data is transferred internationally, we use the transfer protections required by applicable law, such as an adequacy decision or approved contractual safeguards. Contact us to request information about the safeguards applicable to your data.

Retention

• IP-based rate-limit records expire according to their configured limit window, which is no longer than 24 hours under our current configuration.
• Successfully processed Polar webhook records are normally deleted after 90 days. Failed or incomplete events may be kept longer while needed to diagnose or complete processing.
• Licensing and installation records are kept while needed to provide the product, maintain purchase entitlements, enforce seat limits, prevent abuse, resolve disputes, and comply with legal obligations.
• Waitlist email addresses are kept until the waitlist is no longer needed or you withdraw your consent. Support correspondence is kept only as long as reasonably necessary to respond, maintain support history, or resolve a dispute.
• Traffic statistics and configuration stored locally remain on your Mac until the app, its data, or the relevant settings are removed.

When a retention period ends, we delete or anonymize the data unless continued retention is required by law.

Automated controls

Our systems automatically apply rate limits and determine trial or paid-feature access from device, installation, license, and subscription status. These controls can temporarily restrict API requests or paid features. If you believe a decision is incorrect, contact support and ask us to review it.

Your EU and UK privacy rights

If the EU GDPR or UK GDPR applies to you, you may request access to, correction of, deletion of, restriction of, or portability of your personal data. You may also object to processing based on legitimate interests and withdraw consent at any time. Withdrawing consent does not affect processing that was lawful before withdrawal. Some rights are subject to legal exceptions, and we may need to verify your identity before completing a request.

Send requests to support@throttlr.app. You also have the right to complain to the data-protection authority where you live or work, or where you believe an infringement occurred. Requests concerning payment data held by Polar should also be directed to Polar under its privacy policy.

Security and children

We use reasonable technical and organizational safeguards designed to protect personal data. No transmission or storage system is completely secure, so we cannot guarantee absolute security.

Throttlr is not directed to children under 16, and we do not knowingly collect their personal data. Contact us if you believe a child has provided personal data to us.

Changes to this policy

We may update this policy as Throttlr or applicable requirements change. We will publish the revised policy here and update the date above. If a change materially affects how we use personal data, we will provide additional notice where required.