Your usage stays on your Mac.

1. Who is responsible

The controller under Art. 4(7) GDPR is Marius Stellberger, trading as Dualshade, Augustastraße 42, 76709 Kronau, Germany. Write to support@dualshade.xyz about anything in this policy. There is no data protection officer, because none is required.

2. What stays on your Mac

Your usage is never sent to us. Burn reads the usage logs that AI tools already write on your Mac — Claude Code and Codex, for example — and adds them up locally. The totals, history, budgets and exports it produces are stored on your Mac and nowhere else.

Provider API keys stay in the macOS Keychain. If you connect a provider with your own key, Burn stores that key in your Keychain and uses it only for requests from your Mac to that provider.

3. Requests Burn makes to providers you use

Some figures only exist on the provider's side. When you have connected them, Burn asks the provider directly from your Mac, using your own credentials. These requests go to the provider, not to us, and are covered by that provider's own privacy policy:

• Anthropic — organisation usage (with an admin key you enter), and Claude plan limits (using the Claude Code sign-in already in your Keychain; macOS asks your permission first).
• OpenAI — organisation usage, with a key you enter.
• xAI — team billing, with a key and team ID you enter.
• OpenRouter and DeepSeek — activity and balance, with a key you enter.
• Cursor — dashboard usage, using the sign-in the Cursor app has stored on your Mac.

We never receive these credentials or the answers.

4. The licence check

To know whether a Mac has Burn Pro, the app talks to one Dualshade service: a Cloudflare Worker at burn-checkout.marius-stellberger.workers.dev. It asks Stripe whether a purchase is still active and passes the answer back.

• What the app sends: Stripe identifiers for your purchase — a checkout session ID, a customer ID or a subscription ID — and, when you restore a purchase, the email address you type in. Your usage is not part of any request.
• What the Worker keeps: it has no database of its own. To stop the restore form being used to flood an inbox, it remembers an email address in memory for a few minutes after sending to it; that is not written to storage.
• What Burn stores: those identifiers, in your Keychain and in Burn's settings on your Mac, so Pro keeps working offline and after reinstalling.
• Cloudflare runs the Worker as our processor and, like any host, sees your IP address and request metadata while handling a request. We have not switched on Cloudflare's Workers Logs, so we keep no log of these requests.

Legal basis: Art. 6(1)(b) GDPR — performing the contract you entered by buying Pro.

5. Restoring Pro by email

If you type your receipt email into Burn, the Worker looks up that address in Stripe. If it bought Burn Pro, a one-hour unlock link is sent to that address through Resend, our email processor. The answer on screen is the same whether or not the address bought anything, so the form cannot be used to find out who is a customer. Legal basis: Art. 6(1)(b) GDPR.

6. Payments

Purchases run through Stripe Managed Payments. Stripe (Link) is the merchant of record: it takes your payment details, sends your receipt, calculates and collects tax, handles refunds, and manages subscriptions at link.com. Stripe processes that data as an independent controller under the Link privacy policy. We never see your full card details.

Under Link's terms, Stripe shares the order data with us: your name, email address, phone number, billing address, payment information, tax identification number where given, and the order details such as date, plan and price. We use this to run the licence check and to answer support mail. Legal basis: Art. 6(1)(b) GDPR, and Art. 6(1)(c) GDPR where tax and commercial law require us to keep records.

7. Updates

Burn checks for updates automatically with Sparkle, by fetching dualshade.xyz/burn/appcast.xml. That request carries your IP address and the app's name and version, as any download does. Burn does not turn on Sparkle's optional system profiling. Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in delivering security and bug fixes.

8. This website

This page sets no cookies, runs no analytics and loads no third-party scripts or fonts. It is hosted on the webspace behind dualshade.xyz at IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, as our processor. IONOS records standard server logs — IP address, time, requested file and browser — and keeps them only for a limited period to run and secure the service. Legal basis: Art. 6(1)(f) GDPR — operating the site securely.

9. When you email us

If you write to support@dualshade.xyz, we receive your address and whatever you put in the message, and use it only to answer you. The mailbox is hosted by IONOS SE. We delete support mail once the matter is resolved, and at the latest two years after the conversation ends, unless tax law requires us to keep it longer — for example mail about an invoice. Legal basis: Art. 6(1)(b) or (f) GDPR.

10. Processors and transfers outside the EU

• Cloudflare, Inc. — runs the licence Worker.
• Resend — sends restore emails.
• IONOS SE — hosts this page, the download, the update feed and our mailbox.

Stripe acts as a separate controller, not as our processor. Cloudflare and Resend are based in the United States. Both are certified under the EU–US Data Privacy Framework, which is the basis for the transfer (Art. 45 GDPR); Resend's data processing agreement also includes the EU Standard Contractual Clauses.

11. How long we keep data

The Worker keeps nothing beyond the few minutes described above. Purchase records stay in Stripe for as long as tax and commercial law require. Server logs and support mail are kept as described in sections 8 and 9.

12. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and to object to processing based on legitimate interests (Art. 21). Write to support@dualshade.xyz. Data on your Mac is under your control: deleting Burn, its folder in ~/Library/Application Support/Burn and its Keychain entries removes it.

You can also complain to a data protection supervisory authority — the one where you live, or the one responsible for us: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart.

13. No automated decisions, no advertising

There is no profiling, no advertising and no tracking across apps or websites. Whether a Mac is Pro is decided by Stripe's record of your purchase, and nothing else.