Privacy Policy
Last updated 11 September 2026
The application never connects to the internet, and the website keeps the least it can. The rest of this page is that statement in detail.
The app does not phone home. SpaceShift on your computer makes no network connections at all: no window titles, no list of programs, no settings, no layouts, no usage statistics, no crash reports. Licence checks happen on your machine. There is nothing to opt out of, because nothing is sent.
What the website stores
An account exists so you can hold a licence, so the website stores:
- Your email address, which is also how you sign in.
- A hash of your password, made with PBKDF2. The password itself is never stored and cannot be recovered from the hash, by us or by anyone who obtained the database.
- Your System ID, a fingerprint of the computer a licence is issued for. It comes from a Windows installation identifier and cannot be turned back into anything about you or your hardware.
- Your licence keys and orders, so you can see what you bought and move a licence to a new computer.
- Optional billing details you type in yourself, such as a name, company or address. Leave them empty and nothing is stored.
What stays on your computer
Your settings, saved layouts, jump slots, exclusion list and demo record live on your own machine, in your Windows user folder, the registry and shared program data. They are never uploaded. Uninstalling removes the application, and you can delete the remaining data folders yourself if you want nothing left behind.
What we do not do
- No analytics, tracking pixels, advertising or third-party scripts.
- No profiling, no automated decisions, no selling or sharing of your data.
- No marketing email. What we send is transactional: confirming an address, resetting a password, delivering a licence.
Cookies
Two, both strictly necessary and both ours. ss_session keeps you signed in, and ss_pending exists briefly so that clicking your confirmation link in the browser you signed up with logs you straight in. No analytics or advertising cookies, which is why this site has no cookie banner.
Who processes data for us
- Cloudflare hosts the website and the account database.
- Resend sends the transactional emails above.
- Our payment provider handles purchases as merchant of record. They collect the payment details; we never see or store your card number. What reaches us is the fact of a completed order.
How long it is kept
Account and licence records are kept while your account exists, because they are what proves you own a licence. Sign-in sessions expire on their own. Password reset links expire after an hour and are destroyed once used. Ask us to delete your account and we delete it, along with its licences, which then stop working.
Your rights
You can ask for a copy of what we hold, ask for it to be corrected, or ask for it to be deleted. Email support@spaceshiftapp.com from the address on the account and we will action it.
Children
SpaceShift is a tool for people who use a desktop computer for work. It is not directed at children, and we do not knowingly create accounts for anyone under 16.
Changes
If this policy changes, the date at the top changes with it. Changes to what we collect will be described here, not slipped in.