Privacy policy
WideSplit draws your screen. It does not record it. This page lists everything the app can see and everything that ever leaves your Mac. The technical detail behind each statement — which permission, what it is for, how to revoke — is on the Permissions page.
1. Your screen
With the Screen Recording permission, WideSplit streams the virtual displays it creates and draws them onto your physical monitor. Frames exist in memory and on the GPU while the split is on. No frame is written to disk and no frame is sent over the network. The only image the app ever saves is the diagnostic screenshot you request yourself, to a location you choose.
2. Your input
With the Accessibility permission, WideSplit keeps the cursor inside the visible desktops and, if you use the window manager, reads and moves window frames; during setup it scrolls the System Settings privacy list to the WideSplit row: to find the row it reads, in memory, the names macOS gives the switches of that list, stores and sends nothing, and never touches a switch. The app subscribes to mouse events only. It never reads your keyboard — its keyboard shortcuts use the system hotkey API, which does not see any other key — and it never asks for the Input Monitoring permission.
3. What leaves your Mac
- Licence activation (released version; beta builds have none). When you activate a licence key, the licence tool contacts one server and sends the key, an identifier and the name of this Mac, and your language setting. That is what the server needs to say whether the key is valid and on how many Macs it is in use. Nothing about your screen or your windows is included.
- Licence check (released version). Once a day the app asks the licence server whether your licence is still valid, sending the same identifier as at activation. If it gets no answer it keeps working for three more days, so a flaky connection never costs you your screens.
- Update checks. Once a day the app fetches a small XML file from our website to learn whether a newer version exists. The request carries the standard identification of the update framework (app name and version). No system profile is sent. Our website counts these checks per day and app version, as numbers only (see section 6). A download happens only after you click.
- Nothing else. The app sends no telemetry, no analytics, no crash reports and has no “profile sync”; the only numbers we keep are the download and update-check counts of section 6. If you run a firewall, this website is the complete list during the beta — widesplit.app and its earlier address displaymode.pages.dev, which forwards there; the released version adds the licence server.
4. What stays on your Mac
Settings, layouts per monitor, window snapshots and logs are stored in your user library and are deleted by “Revoke permissions & uninstall…”. The trial record and the licence token stay after an uninstall so that a reinstall does not start a new trial; they contain dates, a device identifier and, in the licence token, a hash of the e-mail address the key was issued to — no screen content and no personal data beyond that.
5. Purchases
Orders are handled by Paddle.com Market Ltd, our merchant of record. Paddle receives your payment details and billing address; we receive the order number, the licence key it generated and, for consent records required by consumer law, the e-mail address used at checkout. Paddle’s own privacy policy governs the data it processes.
6. This website
The site is static, apart from the beta sign-up form described in section 7 and the download counts below. It remembers your language choice in your browser’s local storage. It sets no cookies. It is served by Cloudflare Pages, whose logs are governed by Cloudflare’s privacy policy.
To know how often the beta is downloaded and which versions are in use, the site counts, per day, how many times each download file and the update feed are fetched — by file, by app version and by whether the request came from the app’s updater, the link in our download email or a browser. These are numbers only: no IP address, no identifier, nothing that could tell one person from another.
7. Beta sign-up
Draft, not yet reviewed by a lawyer. The form is published; the storage region and the retention period below describe what we do today.
- What we store. The email address you enter; the language of the page you signed up from; how many times this address was sent; and the dates of your first and last sign-up and of your consent. Since 11 October 2026 the form asks for nothing else. Sign-ups sent before that day also hold what the form asked then — your macOS version, your Mac’s model and chip and your external monitors (and, before 29 September 2026, memory, number of CPU cores, the exact macOS version, how each monitor is connected and which window or display tools you use) — and we keep them as they were sent.
- Why. To write to you about the beta, including when it is ready to download; for sign-ups sent before 11 October 2026, also to know which Macs and monitors the beta will run on. Nothing else: no newsletter, no advertising, no sharing with anyone.
- Confirmation e-mail. Right after you sign up we send one e-mail to the address you entered, saying you are on the list, and we note whether it went out (sent, failed, not sent) and when. Signing up again with the same address updates your details and sends the e-mail again; the same form sent twice within a minute gets one. The e-mail is delivered by Cloudflare’s e-mail service, which processes the address and the message to deliver it and keeps its own delivery records (recipient, subject, delivery status); delivery may take place outside the European Union. If someone typed your address without asking you, reply to that e-mail and we delete it from the list.
- Legal basis. Your consent, given by ticking the box on the form. You can withdraw it at any time.
- Where it is kept. In a database run for us by Cloudflare, restricted to data centres in the European Union.
- What we do not store. Your IP address. To limit how many sign-ups come from one address we keep a keyed fingerprint of it (HMAC with a secret key), used only for that limit; without the key it cannot be turned back into the address. A fingerprint older than two hours is deleted at the next sign-up attempt and whenever we export the list. The form loads nothing from other sites and sets no cookies.
- How long. Until the end of the beta and 90 days after it; then we delete the whole list.
- Your rights. Write to [email protected] from the address you signed up with to see, correct or delete your entry, or to withdraw your consent. Signing up again with the same address replaces your earlier details instead of adding a second entry; earlier versions are not kept. You may also complain to the Polish data protection authority (UODO).
- Who is responsible. 3K Konsulting IT, Krzysztof Kołodziejczyk, Poland.
8. Contact
Questions about this policy: [email protected].
Draft for legal review. To be confirmed before the first sale: the controller’s legal identity and address, the retention period of consent records, the exact fields the licence server stores, and the support address (a placeholder domain is used above).