CacheFlo

Privacy policy

Last updated 9 October 2026

This policy explains what personal data is processed when you use the CacheFlo website, buy CacheFlo, use the app or contact us, and the rights you have under the EU General Data Protection Regulation (GDPR). For a plain-language overview, see Privacy & security.

1. Who is responsible

The controller for the processing described here is OwenM, Malta. Contact: privacy@cacheflo.net.

2. The app

CacheFlo processes your files, scan results, app lists, Wi-Fi names, speed test results and settings only on your Mac. We do not receive this data. The app contains no analytics, telemetry or advertising.

The app connects to the internet only for the features listed on the Privacy & security page. When it does, the service it contacts necessarily receives your IP address to answer the request:

  • Free trial check: on first launch, the app sends our licence server a one-way hash of your Mac's hardware ID and the app version. The server stores, under a second secret-keyed hash, only the date your trial started, so the 14-day trial can't be restarted. Legal basis: our legitimate interest in preventing misuse of the free trial and protecting our software (Art. 6(1)(f) GDPR).
  • Licence activation, renewal and deactivation: the app sends our licence server your licence key, the activation ID for your Mac, the same hash and the app version, when you activate or deactivate and about once a week to renew. The server forwards the key to Lemon Squeezy to confirm it is valid and to count activations, with an activation label that includes part of the hash. Legal basis: performance of the contract (Art. 6(1)(b) GDPR) and our legitimate interest in preventing unlicensed use (Art. 6(1)(f) GDPR).
  • Speed test: test data is exchanged with the server you choose (Cloudflare, Apple or your own) when you start a test. Legal basis: your request (Art. 6(1)(b) GDPR).
  • Security list and CacheFlo update checks: the app requests signed files from our server, hosted on Cloudflare. No identifiers or information about your Mac or its apps are sent. Legal basis: our legitimate interest in keeping the app secure and up to date (Art. 6(1)(f) GDPR).
  • App updates: when you press Update for an app, it is downloaded from that developer's own website, which receives a normal download request under its own privacy policy.

Our licence and list servers run on Cloudflare, which acts as our processor. They keep no request logs. To prevent abuse, the licence server counts requests per IP address in memory for one minute, under a hashed form of the address, and then discards it. The licence check is automatic, but it only confirms whether a trial or key is valid; it involves no profiling and no decisions with legal or similarly significant effects.

3. Buying CacheFlo

Purchases are made through Lemon Squeezy (Lemon Squeezy LLC), which acts as the reseller and merchant of record. Lemon Squeezy processes your name, email address, billing country, payment details and order history as an independent controller to take payment, calculate and pay VAT, prevent fraud and send your receipt and licence key. See Lemon Squeezy's privacy policy.

We receive from Lemon Squeezy your name, email address, country, the product you bought, your licence key and its activations, so we can provide support, handle refunds and keep the records tax law requires. Legal bases: performance of the contract (Art. 6(1)(b)) and legal obligations (Art. 6(1)(c)). We never receive your full payment card details.

4. This website

The website sets no cookies, uses no analytics and loads nothing from third parties. It is hosted by Cloudflare, Inc., which processes your IP address, browser details and the pages requested in short-lived logs to deliver the site and protect it from attacks. Legal basis: our legitimate interest in operating a secure website (Art. 6(1)(f)). Cloudflare acts as our processor under a data processing agreement.

5. Emailing support

If you email us, we process your email address, your message and anything you choose to include, to answer you. Legal basis: performance of the contract or pre-contract steps (Art. 6(1)(b)), or our legitimate interest in answering questions (Art. 6(1)(f)). Email to our address is forwarded by Cloudflare Email Routing to our mailbox provider, mailbox provider, e.g. Google.

6. How long we keep data

  • Order, payout and invoice records: at least six years after the end of the year they relate to, as Maltese tax law requires.
  • Licence keys and activations: for as long as the licence exists, and then as long as tax records require.
  • Trial records on the licence server (a secret-keyed hash and a start date): for as long as CacheFlo offers a free trial, so that a trial can't be restarted. They can't be linked to your name or email by us.
  • Licence server rate limiting: one minute, in memory only.
  • Support emails: up to two years after the conversation ends, unless needed longer for a claim.
  • Website logs at Cloudflare: kept briefly, as set by Cloudflare.

7. Transfers outside the EU

Lemon Squeezy and Cloudflare are based in the United States. Transfers rely on the EU–US Data Privacy Framework where the company is certified, or on the European Commission's Standard Contractual Clauses.

8. Your rights

You have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, and to receive it in a portable format. Where processing is based on legitimate interests, you can object at any time. To use these rights, email privacy@cacheflo.net. We reply within one month.

You can also complain to a data protection authority. In Malta this is the Information and Data Protection Commissioner; you can also contact the authority in your own EU country.

9. Other points

  • We make no decisions about you by automated means, apart from the automatic licence and trial check described in section 2, and do no profiling.
  • If you ask us to delete your data, we'll delete what we hold that we can link to you. We may be unable to identify your trial record, because it holds no name or email; deleting it would also allow the trial to restart, which we may refuse on the basis of our legitimate interest.
  • We don't sell or share personal data for advertising.
  • CacheFlo is not directed at children under 16.
  • If this policy changes, we'll update the date above and, for significant changes, say so on this site.