Privacy Policy

Odak collects as little as possible. This page tells you exactly what is collected, by whom, and why — across the website, the macOS app, and the purchase flow.

Effective 2026-04-25 · Last updated 2026-04-25

1. Who we are

Odak is built and operated by Hasan Salih Can, a sole proprietor based in Istanbul, Turkey. In this document, "we", "us", and "Odak" refer to Hasan Salih Can. You can reach us at [email protected].

For paid purchases of Odak, our authorised reseller and Merchant of Record is Paddle.com Market Limited ("Paddle"). Paddle's privacy practices are described at paddle.com/legal/privacy.

2. The website (odak.fyi)

The marketing site at odak.fyi is intentionally light. It does not use:

• Analytics (no Google Analytics, Plausible, Fathom, PostHog, or similar)
• Cookies for tracking
• Advertising or remarketing pixels
• Session replay or heatmap tools

What the site does store and request:

• Theme preference — a single value (odak-theme) saved in your browser's localStorage so the site remembers light or dark mode between visits. It never leaves your browser.
• Web fonts — Inter and JetBrains Mono are loaded from Google Fonts. Your browser's request to Google for those fonts may be logged by Google under their own privacy policy.
• Server access logs — like every web server, the host serving odak.fyi records standard request data (IP address, user-agent, timestamp, requested path) for security and abuse prevention. These logs are retained for up to 30 days and are not used for profiling.

3. The Odak macOS app

Odak is designed to run entirely on your Mac. The app:

• Does not collect telemetry. No usage data, project names, search queries, file paths, or window titles ever leave your device.
• Stores all your data locally — frecency rankings, search history, preferences, and indexed project metadata are kept in macOS application support directories on your Mac and synced nowhere.
• Runs sandboxed and Apple-notarized, with the macOS Accessibility permission you grant used only to read window titles for the IDE switcher.

Update checks (Sparkle)

Odak uses the open-source Sparkle framework to check for updates. Periodically (typically once per day when the app is running), it fetches https://odak.fyi/appcast.xml. The host serving that file logs standard request metadata as described in section 2. Sparkle does not transmit any information about you, your projects, or your usage of the app — only the HTTP request itself, which is necessary to download the file.

Update binaries are downloaded from GitHub Releases. GitHub may log the download under its own privacy policy.

Crash reports

Odak does not include a third-party crash-reporting SDK. Crash reports generated by macOS are handled by Apple per your system "Analytics & Improvements" settings, not by us.

4. Purchases & Paddle

When you buy Odak, the checkout is handled by Paddle, our Merchant of Record. Paddle collects what is necessary to process your payment and meet tax and accounting obligations:

• Name and email address
• Billing address and country (for tax)
• Payment method details (handled by Paddle's PCI-compliant systems — we never see your card number)
• IP address (for fraud prevention)

Paddle is the controller of your payment data and processes it under its own privacy policy. After a successful purchase, Paddle shares with us a limited transaction record — typically your name, email address, country, and the products you bought — so that we can deliver your license key, provide support, and send you essential transactional emails (license delivery, receipts, important update notices). We do not receive your card details.

5. Support email

If you write to us at [email protected] or [email protected], your email and its contents are stored in our mailbox so we can reply. We don't add support correspondents to any marketing list.

6. Your rights

Depending on where you live, you may have rights under the EU/UK GDPR, the California Consumer Privacy Act (CCPA/CPRA), Turkey's KVKK, or similar laws. These typically include the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Object to or restrict certain processing
• Receive your data in a portable format
• Withdraw consent where processing is based on consent
• Lodge a complaint with your local data-protection authority

To exercise any of these rights for data we hold, email [email protected]. For payment data held by Paddle, contact Paddle directly via paddle.net.

7. Retention

• Server access logs: up to 30 days.
• Purchase records (name, email, transaction ID, license): kept for as long as required by tax and accounting law (typically 5–10 years), then deleted.
• Support email: kept until no longer useful for support, generally up to 24 months after the last reply.

8. Changes

We may update this policy when the product or our processors change. The "Last updated" date at the top of this page reflects the most recent revision. Material changes affecting paying customers will be communicated by email.

9. Contact