WorkerDockPrivacy policy
This policy explains what personal data Webtions OÜ processes when you visit workerdock.app, subscribe to WorkerDock updates, download the WorkerDock Mac app or use its update check. It also covers what the Mac app itself does with your data. For cookies and similar technologies, see the Cookie policy.
1. Who we are
The controller of your personal data is Webtions OÜ, Sepapaja 6, 15551 Tallinn, Estonia (VAT EE102051737). Contact: mail@workerdock.app.
2. In short
- The WorkerDock Mac app runs on your Mac. It has no accounts, no analytics and no crash reporting. Your code, project files, logs and variable values are not sent to us.
- The app makes one kind of network request of its own: an update check to
workerdock.app/appcast.xml. You can turn it off in the app's Settings. - This website uses no cookies and no local storage. It measures visits with our own cookie-free analytics.
- If you subscribe to updates, your email address is stored with our email provider, Loops.
- We do not sell personal data, show ads, or build advertising profiles.
3. What we collect, why, and on what legal basis
| Data | Why we use it | Legal basis (GDPR) |
|---|---|---|
| Email updates: your email address and the time you subscribed (stored by Loops, our email provider) | To send you WorkerDock updates, news and tips, and to honour unsubscribe requests | Your consent (Art. 6(1)(a)). You can withdraw it at any time. |
| Website analytics (Webtions Analytics): see section 5 | To understand which pages are used and improve the site | Our legitimate interest in running and improving the site (Art. 6(1)(f)) |
| Request logs at the hosting provider: IP address, time, requested address, browser and device details, and country, for the site, the app download and the app's update check | To deliver the site and files, keep them secure and prevent abuse | Our legitimate interest in security and reliable delivery (Art. 6(1)(f)) |
App update check: the request your Mac sends to fetch appcast.xml (IP address and a user agent that includes the app and system version, as Sparkle sends by default) | To tell the installed app when a newer version is available | Our legitimate interest in delivering security and bug-fix updates (Art. 6(1)(f)) |
| Emails and messages you send us, including on X | To reply to you and handle your request | Steps at your request, or legitimate interest (Art. 6(1)(b) and (f)) |
We do not use this data for automated decisions or profiling that has legal or similar effects on you.
4. The WorkerDock Mac app
The app runs locally. It reads the project folders you add, runs the commands in those projects and shows their output, all on your Mac. We do not receive your projects, logs, environment variable names or values, file paths, or any usage statistics.
- Update check. The app uses Sparkle to check for updates, automatically and when you choose Check for Updates…. Each check requests
https://workerdock.app/appcast.xml. We do not ask Sparkle to send a system profile. Switch automatic checks off under Settings, Check for updates automatically. - Local Explorer. The Explorer tab shows Cloudflare's Local Explorer, which is served by your own project on
localhost. That traffic does not leave your Mac. - Your projects. A project you run may itself connect to the internet or to Cloudflare. That is governed by your project's code and by Cloudflare's terms, not by us.
5. Website analytics
We measure visits to workerdock.app with Webtions Analytics, a service operated by Webtions OÜ and hosted on Cloudflare (dash.webtions.com), with its database in Cloudflare's EU jurisdiction. It is built to avoid identifying individual visitors:
- It sets no cookies and uses no local storage.
- For each page view the visitor's browser sends the page path, the referring site, the screen and window size and the browser language. The server also sees the IP address and user agent of the request.
- The IP address is used only in memory to work out a rough location (country, region, city, taken from Cloudflare's edge data) and to compute a one-way visitor hash from the IP address, user agent, date and a secret salt that changes every day. The IP address is never written to our analytics database.
- Because the salt changes daily, the hash cannot be used to recognise a visitor across days.
- We store the hash, the page, the referrer, the country, region and city, the browser, operating system and device type, the language and screen size. Region and city are dropped from long-term archives.
- We also count two events on this site: a click on a download button and a successful email signup. Neither includes your email address.
- Bots, localhost and preview traffic are ignored. The analytics script is not loaded when you browse from a local address.
The analytics data is used only for our own reports. It is not shared with advertisers or used for advertising.
6. Cookies
We set no cookies. The hosting provider may set strictly necessary security cookies in some cases. Details are in the Cookie policy.
7. Who processes your data
| Provider | What for | Data involved |
|---|---|---|
| Cloudflare, Inc. (privacy policy) | Hosting and delivery of the site (Workers, CDN and DNS), file storage for app downloads (R2), security and traffic logs. Also hosts Webtions Analytics. | Request data such as IP address, user agent and time; analytics data |
| Webtions Analytics (operated by us, running on Cloudflare) | Cookie-free website statistics | See section 5 |
| Loops (privacy policy, data processing agreement) | Stores the email updates list and sends the updates, including the welcome email. Handles unsubscribe requests. | Your email address, subscription time and email delivery data (such as whether a message was sent or opened) |
Cloudflare acts as our processor for the data we store with it and handles traffic logs for its own security and network operations as described in its policy. We do not sell data. We may disclose data to authorities where the law requires.
8. International transfers
Cloudflare operates a global network, so your request may be handled in a country outside the European Economic Area, such as the United States. Loops, our email provider, may also process data outside the EEA; see its privacy policy and data processing agreement. Where personal data leaves the EEA we rely on safeguards such as the EU–US Data Privacy Framework or Standard Contractual Clauses. Our analytics database is kept in Cloudflare's EU jurisdiction.
9. How long we keep data
| Data | Retention |
|---|---|
| Subscriber email and signup time (at Loops) | Until you unsubscribe or ask us to delete them |
| Analytics: raw page views (hashed visitor, page, referrer, device, location) | Processed into daily statistics within minutes, then archived without region and city. There is no IP address in the archive. We do not currently delete the archive automatically. |
| Analytics: daily statistics | Kept as long as they are useful for trends. They contain counts, not individuals. |
| Hosting and security logs at Cloudflare | Per Cloudflare's retention, normally short. We do not export or keep them ourselves. |
| Emails and messages to us | As long as needed to deal with your request, then deleted unless we must keep them by law |
10. Your rights
Under the GDPR you can ask us to give you access to your data, correct it, erase it, restrict or object to its processing, and give it to you in a portable format. Where we rely on consent, you can withdraw it at any time without affecting earlier processing. You can object at any time to processing based on our legitimate interest.
To use a right, or to unsubscribe, email mail@workerdock.app or reply to any update email. We reply within one month. We can only find analytics data about you if you can tell us your visit details, because it contains no name or email. You also have the right to complain to a supervisory authority. In Estonia that is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), or the authority in your own country.
11. Security
The site and the app's update feed are served over HTTPS. Subscriber data sits with our email provider and is accessible only through our account there. Updates for the app are signed, and the app checks the signature before installing one. No system is perfectly secure, but we take care of what you share with us.
12. Children
The site and the app are for developers and are not aimed at children. We do not knowingly collect data from anyone under 16. If you think a child has subscribed, email us and we will delete it.
13. Changes
We may update this policy. The date at the top shows when it last changed. We will describe material changes on this page, and if we change how we use subscriber emails, we will tell subscribers first.
14. Contact
Questions about privacy? Email mail@workerdock.app, message @harishchouhan on X, or write to Webtions OÜ, Sepapaja 6, 15551 Tallinn, Estonia.