Privacy policy

Last updated: November 7, 2026.

Controller: David Baños Expósito. Contact: david@teluria.es. The owner’s full details are in the legal notice.

In short: GeekStat Menus has no telemetry, no analytics, and no accounts. What it measures stays on your Mac. It only connects to the internet for the license and for what you turn on, and here we tell you why, with whom, and what we keep.

1. What stays on your Mac

System metrics, processes, history, and settings stay on your Mac and never reach us. Weather locations are stored only on your Mac; they are rounded before being sent for the forecast (§2).

2. App connections

What for	With whom	What it receives	When
Trial and license	Our server (`geekstats-api.teluria.es`, on Cloudflare)	A pseudonymous identifier of the Mac: a hash of the computer’s internal identifier, from which that identifier can’t be recovered; never the serial number. Also the Mac model, the app version, the language your system adds to the request, and your IP address. When you activate, the license key	When you close the welcome window that appears the first time you open the app (and one retry if it fails); when you activate, deactivate, or open the list of Macs; and once, 30 days after purchase, to confirm the license. Nothing else
Weather with MET Norway (free)	MET Norway (`api.met.no`), directly from your Mac	The approximate coordinates of your locations and your IP	Only if you turn on the Weather module
Weather with Open-Meteo (only for the licenses we give it to)	Our server (`geekstats-api.teluria.es`), which requests the forecast from Open-Meteo	To our server: your license’s weather token (a signed code with your Mac’s pseudonymous identifier and your license’s), the approximate coordinates and altitude of your locations and your IP. To Open-Meteo, from our server: only those coordinates and altitudes, without your IP or anything that identifies you	Only if your license has it and you choose it in the Weather module
Public IP	Cloudflare (1.1.1.1) or OpenDNS	Your IP	Only if you turn it on, with the Network dropdown open
Updates	teluria.es	Your IP, the app version, and the system language	Only if you turn them on

City search happens on your Mac, using a list included in the app: what you type never leaves your Mac. Coordinates are rounded before being sent: to about 1 km for cities from the list, and to about 10 km if you enter coordinates by hand.

3. What we keep and for how long

On our server (Cloudflare; the database is in the European Union):

License: its identifier, a hash of the key (not the key), Paddle’s customer and transaction IDs, its status, and its dates. For as long as the license exists.
Revoked licenses (refund or chargeback): we keep a record that they are revoked for as long as version 1.x is on sale, so the key can’t work again. Paddle’s customer and transaction IDs are deleted 4 years after revocation.
Licensed Macs: Mac identifier, model, date, and app version. Until you free up the seat.
Trials: Mac identifier and start date. For as long as version 1.x is on sale, because it is the only way to stop the trial from being repeated. We keep it even if you ask for it to be deleted (§7).
The full key, only to show it to you on the page you see after buying: the page shows it for 24 hours and it is deleted at most one hour later.
What we delete remains in the database backups for another 7 to 30 days.

On our server we don’t keep your IP, your coordinates, or your email. Your IP is only held in memory for a few minutes to stop abuse.

On teluria.es (the website and updates): each request is logged with a shortened IP (IPv4 without the last number; IPv6 with only the first three groups), for 14 days, for server security and to count downloads.

If you write to us, we keep the conversation for as long as needed to help you, and for 2 years at most. To help you with a purchase, we look up its details in Paddle.

4. The purchase

The purchase is handled by Paddle.com, the merchant of record. Paddle collects your name, email, country, and payment details, and is responsible for them under its own privacy policy (paddle.com/legal/privacy). We receive from Paddle what we need to create the license and, if you write to us, to help you. When you buy, the purchase page passes Paddle a random value with no personal data, used to show you the key at the end.

Our purchase page (geekstats.teluria.es/comprar) loads Paddle’s payment script (Paddle.js). When you open it, even if you don’t buy, Paddle receives your IP and browser data. Payment uses Paddle’s strictly necessary cookies, on its own domain. Our page sets no cookies of its own.

5. Why we use the data and on what legal basis

Trial and license: to provide the service you ask for and perform the contract (GDPR, Art. 6(1)(b)).
Keeping the trial record so it can’t be repeated, and abuse limits: legitimate interest in preventing fraud and protecting the service (Art. 6(1)(f)).
Shortened website log: legitimate interest in server security (Art. 6(1)(f)).
Support: the contract or our legitimate interest in helping you (Art. 6(1)(b) and 6(1)(f)).
Invoicing and taxes are a legal obligation of Paddle, as controller of the purchase, not processing of ours.

The license data is required: without it there is no trial or license. We don’t make automated decisions or build profiles. We don’t sell or share data, or use it for advertising.

6. Who processes the data

Controller of GeekStats’s processing (the app, the license server, the website and its logs): David Baños Expósito.
Infrastructure. These act as processors, under their data processing agreements:
- Cloudflare, Inc. runs the license server (geekstats-api.teluria.es). Data is stored in the EU, but each request is handled by the Cloudflare data center nearest to you, which may be outside the EU, and Cloudflare also processes your IP to deliver and protect the service. It does so with GDPR safeguards (standard contractual clauses and the EU-U.S. Data Privacy Framework).
- The website, the purchase page (geekstats.teluria.es), the legal texts, updates, and downloads are served from a private server that we manage ourselves, hosted in a data center of a provider in the EU, which doesn’t manage the server or use its data.
Paddle.com Market Ltd (United Kingdom), the merchant of record, is the controller of the purchase data.
MET Norway receives your IP and approximate coordinates directly from your Mac, if you use it.
Open-Meteo (Switzerland) receives from our server only the approximate coordinates and altitude of your locations, never your IP, if your license has it and you use it. We keep each forecast for up to 30 minutes in the server’s cache, by location and with nothing that identifies you.
The public IP services (Cloudflare 1.1.1.1 or OpenDNS) receive your IP directly from your Mac, if you turn that option on.

7. Your rights

You can ask to see your data, correct it, delete it, object to or restrict its use, or take it with you (portability), by writing to david@teluria.es.

For licenses, we’ll ask you to write from the email used for the purchase or give us the transaction ID from your receipt, and we’ll check it in Paddle.
For a trial, the Mac identifier is enough (its first 8 characters are in Settings → License).
We keep the trial record even if you ask for it to be deleted, because it is the only way to stop the trial from being repeated (legitimate interest, GDPR Arts. 17(3) and 21(1)).
If we delete your license data, the key can no longer be activated.

If you disagree with our answer, you can complain to the Spanish Data Protection Agency (aepd.es) or to the data protection authority of your country.

This is a translation. If it differs from the Spanish version, the Spanish version prevails.