Who is responsible
Maximo Garcia (also known as Maxi) develops and operates Cactus and is the controller for the personal data Cactus decides to process. Contact support@usecactus.app for privacy questions or requests.
Checkout is provided as “Sold through Link.” Stripe and Link separately decide how they process payment-account, payment-method, fraud-prevention, tax, and transaction-support data under their own terms and privacy notices.
What stays on your Mac
Your schedule, blocked domains, and current blocking state are stored locally. Cactus has no user account, cloud sync, advertising, or product analytics. It neither sends your blocked-site list to Cactus servers nor requests icons from those sites.
When Cactus opens, Sparkle requests a signed update feed from Cactus’s Cloudflare-hosted release service. Cloudflare may receive the IP address and standard request metadata. Profile reporting and automatic installation are disabled, and the request does not include your schedule or blocked domains.
Purchases and licenses
Link and Stripe collect the details needed to process your purchase. For fulfillment, license activation and recovery, refunds, disputes, and records Cactus receives or stores the purchase email, Stripe checkout session, payment-intent and event references, payment-link reference, amount, currency, payment status, a hash of the license key, and purchase/update timestamps.
When you activate Cactus, the app sends the license key over HTTPS. The server hashes the key and checks for a paid order; it does not store the raw key. License recovery sends the purchase email and Stripe receipt number over HTTPS, verifies them with Stripe, and returns the key. The receipt number is used for that check and is not added to the Cactus purchase database. A full-refund or lost-dispute event changes the stored payment status so that future activation and recovery stop.
This processing is necessary to perform the purchase contract and provide the license. Transaction records may also be retained where necessary for accounting, tax, disputes, fraud prevention, and legal claims.
Optional feedback
If you choose Send Feedback, Cactus sends and stores your message. You may provide an email address if you want a reply; leave it blank if you do not. If you turn on diagnostics, Cactus also sends the Cactus version, macOS version, protection state, launch-at-login state, and latest error. Blocked-site names are excluded.
Feedback, any reply email you provide, an identifier, source, and timestamp are stored in Cloudflare D1. Cloudflare sends an email notification to the developer. We use this information to respond to your request and for the legitimate interest of diagnosing problems and improving Cactus.
Support and purchase cancellation
If you email support or send a withdrawal notice, Cactus receives the sender address and message, plus any name, checkout email, receipt or order identifier, and order or access dates you choose to include. We use this information to answer the request, identify the purchase, perform the purchase contract, and meet consumer-law, refund, dispute, and legal obligations.
Ordinary support correspondence is deleted when the request is resolved and the record is no longer needed. Withdrawal, refund, and dispute correspondence may be kept with the related purchase record while needed for accounting, consumer-law, dispute, and legal-claim obligations.
Website and service providers
Cloudflare hosts the website, APIs, database, downloads, rate limiting, logs, and traces. It may process request information such as IP address, request metadata, and security signals. Cactus does not add advertising or analytics trackers to the website.
- Stripe and Link — checkout, payment, tax, fraud, receipts, order management, and transaction support.
- Cloudflare — website, API, database, feedback notification, downloads, update delivery, security, and operational infrastructure.
These providers may process data outside the EEA. Their applicable terms, data-processing agreements, and transfer safeguards govern that processing.
How long information is kept
Purchase records and license hashes are kept while needed to provide the purchased license and meet accounting, tax, refund, dispute, fraud-prevention, and legal-claim obligations. Private daily backups of purchase records are automatically deleted after 365 days. Feedback notification emails are deleted when the support or product review is complete and no later than 180 days after submission. A daily cleanup removes every feedback record from the active database within 180 days; Cloudflare recovery copies and technical logs expire under the provider’s retention periods.
Your rights
Depending on the law that applies, you may ask for access, correction, deletion, restriction, or a portable copy of your personal data, and you may object to processing based on legitimate interests. Some information may need to be retained for a purchase, legal obligation, or legal claim.
Send requests to support@usecactus.app. If you are in Sweden or the EEA, you may also complain to the Swedish Authority for Privacy Protection (IMY) or your local supervisory authority. For data controlled directly by Stripe or Link, use Stripe’s privacy request portal.
Children and changes
Cactus is not directed at children and does not knowingly seek personal data from them. We may update this policy when the product, providers, or law changes; the current version and update date will remain on this page.