Privacy Policy
Last updated: 23 July 2026
This policy explains how personal data is handled on istefox.dev and in the Agentwake macOS app, under Regulation (EU) 2016/679 (GDPR) and the Italian Privacy Code (Legislative Decree 196/2003, as amended). The short version: the site collects your email only if you sign up for the Agentwake beta, the app itself sends no telemetry, and nothing is sold or shared for advertising.
1. Data controller
Stefano Ferri, independent software developer, Italy. Contact:stefferri@icloud.com.
2. What is processed, and why
Beta signup
If you join the Agentwake beta, I process your email address, together with the browser user-agent and referring page of the signup request. The email is used to send you the beta invite (download link and Pro activation link) and, sparingly, beta-related communications; there is no newsletter. Legal basis: performance of the beta agreement you request when you sign up (art. 6(1)(b) GDPR). The data is stored in Cloudflare Workers KV.
Anti-abuse check
Cloudflare Turnstile protects the signup form by analysing technical signals from your browser to tell humans from bots. Legal basis: legitimate interest in preventing spam and abuse (art. 6(1)(f) GDPR).
Hosting and connection logs
Cloudflare Pages hosts the site. Like any host, Cloudflare processes connection data (IP address, request metadata) to deliver the site and protect it from attacks. Legal basis: legitimate interest in operating and securing the site (art. 6(1)(f) GDPR).
Transactional email
Resend delivers the beta invite email, and processes your email address on my behalf solely to deliver that message.
Purchases
Polar Software Inc. operates the checkout for Agentwake Pro as merchant of record. Polar collects and processes the data needed for the purchase (name, email, payment and billing details, invoicing) as an independent controller, under its own privacy policy. I receive from Polar the order information needed to support you (such as your email and order reference), never your full payment details.
Downloads
GitHub Releases serves the Agentwake DMG download; GitHub processes connection data for that download under its own privacy policy.
3. The Agentwake app
Agentwake contains no telemetry and no analytics. The only network calls the app makes are Sparkle update checks against the release feed, license key validation with Polar, and the pricing-table refresh you trigger yourself. The optional token-cost estimate reads usage fields from local Claude Code session files, only after you opt in, and the data never leaves your Mac. Agent hooks report only "this session is alive" heartbeats, locally.
4. Cookies and local storage
The site sets no advertising or analytics cookies and uses no tracking. It stores two technical preferences in your browser: your light/dark theme choice (localStorage) and the dismissal of the price banner (sessionStorage). Cloudflare Turnstile may set its own strictly functional cookie while verifying the signup form. None of this requires a cookie banner under the Garante's guidelines on technical cookies.
5. Recipients and processors
The services that touch personal data, each bound by its own data processing terms:
- Cloudflare, Inc. (hosting, KV storage, Turnstile)
- Resend (Plus Five Five, Inc.) (transactional email delivery)
- Polar Software Inc. (checkout, as independent merchant of record)
- GitHub, Inc. (DMG downloads, release feed, issue tracker if you open an issue)
No data is sold, rented, or shared for advertising purposes.
6. Transfers outside the EEA
The providers above are US companies, so data may be processed in the United States. Transfers rely on the EU-US Data Privacy Framework where the provider is certified, or on Standard Contractual Clauses, in line with Chapter V of the GDPR.
7. Retention
I keep beta signup data for the duration of the beta program and the launch that follows, then delete it, or sooner if you ask. Hosting and security logs follow Cloudflare's short technical retention. Polar keeps purchase records for as long as tax law requires.
8. Your rights
Under articles 15 to 22 of the GDPR you can ask for access to your data, a copy of it, rectification, deletion, restriction of processing, portability, and you can object to processing based on legitimate interest. Just write tostefferri@icloud.com; I answer within the timeframes the GDPR sets. You also have the right to lodge a complaint with the Italian supervisory authority, theGarante per la Protezione dei Dati Personali.
9. No profiling
No automated decision-making and no profiling take place, on the site or in the app.
10. Changes to this policy
If the processing changes (for example, a new provider), I update this page and the date at the top. Substantial changes affecting beta testers get announced by email.