Privacy

Last updated 24 August 2026

Airlock is a paid application, not an advertising-funded one, and it is built so that being paid does not require watching you. This page says exactly what leaves your Mac, because a policy that only says what does not is worth very little.

What stays on your Mac

All of it. Specifically:

• Your clipboard history — including anything you copied and forgot about.
• Anything you parked in the drop tray.
• Your code, your prompts, and anything your coding agents do or say.
• Your agent sessions — which projects, which commands, which approvals.
• Your approval rules (policy.yaml).
• Your calendar events, read through macOS with your permission and never copied anywhere.
• Dictated audio and its transcript. Transcription runs on your Mac using macOS speech recognition; audio is not uploaded and not stored.

There is no account and no sign-in, so there is no server that could hold any of this even if we wanted it to.

What leaves your Mac

Four requests. This is the complete list.

1. Activating your licence

Once, when you paste your licence key: Airlock sends the key and this Mac's hardware identifier to our licence server, which registers the licence to that Mac with Lemon Squeezy and sends back a signed licence. It does not happen again unless you activate on a different Mac.

2. Checking your subscription

In the days around your renewal date, Airlock asks our licence server whether your subscription is still active, and receives a new licence valid for the next period.

• What is sent: your licence key, plus one hardware identifier for this Mac (its IOPlatformUUID) — that identifier is how one licence stays tied to one Mac, and it is passed to Lemon Squeezy as the name of the activation. Renewals send the signed licence back instead of the key, and it carries that same identifier and the email address you bought with. Nothing else: no usage, no session data, no prompts, no file names.
• How often: only near your billing date. On the yearly plan that is a handful of requests a year and none at all for roughly the eleven months in between. A copy on the free trial never contacts the server at all, because there is no subscription to check.
• Your IP address is necessarily visible to our host (Cloudflare) as it is for any request on the internet. It is used to rate-limit the licence endpoints, which means a short-lived counter against it, and it is never written down beside your licence or your email.
• If it fails, nothing happens for a further two weeks — your licence carries its own grace period, so a flight or a bad network is invisible to you.

3. Checking for updates

Airlock can update itself using Sparkle, a widely used open-source updater. This is off until you turn it on: Airlock asks before its first check and does nothing if you decline. When enabled, it requests an update feed from our host. No identifier is attached.

4. Album art

When the media card is showing something Spotify is playing, Airlock loads the cover image from the address Spotify gives it — a request to Spotify's image servers, not to us. It carries nothing about your licence, though those servers necessarily see your IP address as with any image on the internet. Switch the media widget off in Settings and it never happens.

Buying a subscription

Payments are handled by Lemon Squeezy, who act as merchant of record. You buy from them, not from us, and your payment details go to them and never to us or to your Mac — we never see or store a card number.

From them we receive your email address, your licence key, and your subscription status, which is what lets us issue and renew your licence and answer you if you write in. Lemon Squeezy handle billing data under their own privacy policy.

This website

No analytics, no cookies, no tracking pixels, and nothing third-party of any kind: the one webfont is served from this site rather than from Google, and the one script is ours and only works the approval demo on the front page. Nothing is set in your browser. Our host keeps standard short-lived server logs for security and reliability, as any host does.

Who processes data on our behalf

• Lemon Squeezy — payments, invoicing and tax as merchant of record.
• Cloudflare — hosting for this site and the licence server.

That is the entire list. No analytics provider, no CRM, no email marketing platform.

How long anything is kept

Subscription records are kept while your subscription is active and afterwards only as long as tax and accounting law requires. Server logs are short-lived and are not used to build any profile.

Your rights

If you are in the EU or UK, you have the right to access, correct, export or delete your personal data, to object to processing, and to complain to your data protection authority. Write to hello@useairlock.app and we will act on it.

Deleting your data means cancelling your subscription and removing the record of it. Your copy of Airlock keeps working until the period you paid for ends, because the licence on your Mac is self-contained.

Children

Airlock is a Mac utility for professional use and is not directed at children under 16.

Changes

If this policy changes in a way that affects what leaves your Mac, that change will be in the release notes of the version that makes it — not quietly published here. Adding a new outbound request without saying so would break the only promise on this page that matters.

Who we are

Airlock is made by Guillermo del Olmo, Carrer Bobines 46, 08197 Valldoreix, Barcelona, Spain.
Contact: hello@useairlock.app