Privacy Policy

Who is responsible

Botroost and botroost.com are run by Jett Coffeen, an individual based in Texas, USA. Questions or requests: heco5533@gmail.com.

Buying Botroost: Lemon Squeezy

Purchases are processed by Lemon Squeezy, the merchant of record for Botroost. When you buy, Lemon Squeezy collects your name, email address, billing details (such as country and postal code) and payment information, handles payment and tax, and issues your license key. Lemon Squeezy’s handling of that data is covered by the Lemon Squeezy Privacy Policy. We never receive your card details.

As the seller, we can see your order in our Lemon Squeezy dashboard: your name, email address, country, what you bought and your license key with its activations. We use this only to deliver your purchase, verify licenses, answer support requests and meet tax and legal obligations.

The checkout opens in a Lemon Squeezy window on top of our page; that window is Lemon Squeezy’s, under its own privacy policy.

The website

• No analytics, trackers, ads or cookies of our own. The site loads no third-party scripts; its fonts and images are served from botroost.com itself.
• The site is hosted on Cloudflare. Like any web host, Cloudflare processes technical data such as your IP address and browser details to deliver and protect the site, and shows us aggregate traffic statistics (for example, number of visits by country). We don’t use this to identify you.
• After checkout, the thank-you page may keep the link to your Lemon Squeezy receipt in your browser’s session storage so it can show it to you. It stays in your browser and is cleared when you close the tab.

The app: what stays on your Mac

Botroost has no account and no sign-in. Your settings, the agents you connect, their status and activity lines, your chosen city, style customizations, plugins and any API keys or calendar links you add are stored in Botroost’s data folder on your Mac, readable only by your user account. Your agents talk to Botroost through a local command (broost) and a local connection that only accepts requests from the same Mac. None of this is sent to us.

Botroost does not include analytics, telemetry, advertising or crash-reporting services. It doesn’t use your Mac’s Location Services, contacts, photos or camera, and it doesn’t record audio.

The app: what goes online, and why

• License activation and checks go to our license server at botroost.com/api/license/… (a Cloudflare Worker), which passes them on to Lemon Squeezy. It sends your license key, a random activation id, and a device id: a salted SHA-256 hash of your Mac’s hardware id (the raw hardware id never leaves your Mac). Activation also sends your Mac’s name as set in System Settings (for example “Jett’s MacBook Pro”), which Lemon Squeezy stores as the activation’s name together with the first 8 characters of the device id, so you and we can tell your Macs apart. The server answers with a signed license token that includes the name and email on the order; the app keeps it on your Mac. After activation the app re-checks about every 3 days while online.
• What the license server keeps: it doesn’t store your license key, name, email or device id, and it doesn’t keep request logs. To limit key sharing it stores, per key, only a SHA-256 hash of the key with two counters: the highest number of activations seen, and that day’s activations and Mac moves (the daily counter is deleted after 2 days). Your IP address is used only briefly, to rate-limit requests.
• Weather: the built-in weather panel asks MET Norway (api.met.no) for the forecast at the coordinates of the city you chose (city-level, not your exact location). The first city is guessed from your Mac’s time zone, without any network request.
• City search: when you search for a city in setup or Settings, the text you type is sent to Apple’s geocoding service (Apple’s privacy policy) to find it.
• Updates: once a day (and when you click Check for Updates) the app downloads the update feed from botroost.com, and downloads an update if there is one. These are plain file requests; the app sends no system profile, only its version in the request header. You can turn automatic checks off in Settings › General.
• Plugins you add: calendar (a private ICS link from Google, iCloud or another calendar), markets (Yahoo Finance, Finnhub, Alpha Vantage or CoinGecko), air quality, news feeds or your own plugins only run if you install them. Each one connects directly from your Mac to the service you chose, using your own link or API key; we never see that data. Those services’ own privacy policies apply.
• Contact Support: if you choose Contact Support or Copy Diagnostics, Botroost prepares an email or text with your app version, macOS version, Mac model, style, display and license status with the key masked (no name, email or full key). It’s only sent if you send it yourself.

Every online request also reveals your IP address to the server it goes to, as with any internet connection.

Email

If you email us, we keep the conversation to help you and only use your email address to reply. We don’t send newsletters or marketing email unless you ask for it.

Sharing and selling

We don’t sell, rent or share your personal information, and we don’t use it for advertising. The only services involved are the ones named on this page (Lemon Squeezy, Cloudflare, MET Norway, Apple, and any plugin services you choose). We may disclose information if the law requires it.

How long we keep it

Order and license records are kept by Lemon Squeezy for as long as your license exists and as needed for tax and legal records. The license server’s daily counters expire after 2 days; the hashed per-key activation count is kept while the key is in use. Support emails are kept while they’re useful for helping you. Data on your Mac stays until you delete it; broost uninstall removes Botroost and its data folder (it moves them to the Trash).

Your choices and rights

You can ask us what personal data we have about you, ask us to correct or delete it, or ask any other privacy question at heco5533@gmail.com. Depending on where you live (for example the EU, UK or California), you may have additional rights under local law, and you can complain to your local data protection authority. Some order records must be kept by Lemon Squeezy for tax purposes; for those you can also contact Lemon Squeezy directly.

Children

Botroost isn’t aimed at children under 13, and we don’t knowingly collect their personal information.

Changes

If what Botroost collects changes, we’ll update this page and its effective date before the change ships.