Privacy Policy

Last updated September 16, 2026.

This page lists exactly what leaves your Mac or your browser, and who handles it.

The app

Your History never leaves your Mac. Copyrail has no analytics or telemetry. It connects to the internet only when you ask it to:

• Activating or deactivating a Mac sends your key and a one-way hashed id for that Mac to copyrail.com. The id is a salted SHA-256 of the Mac's hardware UUID, and it can't be reversed to find the UUID.
• Checking for updates requests copyrail.com/appcast.xml. The request carries only the versions of Copyrail and of its updater, and no system profile. Automatic update checks are off unless you turn them on in Settings. Check for Updates… in the menu checks once.
• Copy as Markdown on a link fetches that page's title from the linked site, not from copyrail.com.

The website

Cloudflare hosts copyrail.com. The site counts visits with Cloudflare Web Analytics, which sets no cookies.

Buying

Dodo Payments processes your payment as the merchant of record. Your card details go to Dodo and never reach Copyrail. After you pay, copyrail.com keeps:

• the email address you bought with,
• your key,
• Dodo's id for the payment,
• the hashed ids of the Macs your key is active on,
• when you bought, when each Mac was activated, when the key email was sent, and when a refund was made.

Resend delivers the email with your key, so it receives your email address and your key.

Lost your key?

When you ask for your key again, copyrail.com emails it through Resend only if the address you entered bought Copyrail, and shows the same message either way. To limit how often anyone can ask, it keeps a hashed form of the address you entered and of your IP address, keyed with a secret so they can't be reversed, and deletes both within 25 hours. The email's link to free a Mac works for 24 hours, and nothing about it is stored.

Who handles your data

• Dodo Payments: payments, tax, and refunds.
• Cloudflare: hosting the website, storing purchase data, and counting visits.
• Resend: sending key emails.

Deleting your purchase data

Email hello@copyrail.com from the address you bought with to have your purchase data deleted. Deleting it also deactivates your key. Dodo keeps its own payment records under its own privacy policy. You'll get a reply within 2 business days.

Changes to this policy

This policy may change. A change takes effect when it's posted on this page with a new Last updated date, and no email is sent about it.