Privacy Policy

About this document

This document is the Privacy Policy (“Policy”) for ARADAR (“the Software”, “the App”). It explains what limited personal data we collect, how we use it, and what rights you have regarding that information.

ARADAR is operated by Obliged Pty Ltd (ACN 669 540 201, ABN 28 669 540 201), a company registered in New South Wales, Australia, with registered address at PO Box 21, Caringbah NSW 1495, Australia (“we”, “us”, “our”).

We take privacy seriously and have designed ARADAR to collect as little data as possible. Most of your library, audio files, and analysis results never leave your computer.

1. Information We Collect

1.1 Crash Reports

We use a third-party error reporting service to collect crash and error reports from two surfaces: the macOS Software itself and this marketing website at aradar.app.

From the Software. When ARADAR crashes or encounters an error, we collect a report containing the type of error, the part of the code where it occurred, the version of the Software, and your operating system version.

Before transmission, we scrub personally identifying information from these reports. File paths containing usernames are stripped, IP addresses are not retained by us, and audio content is never included in crash reports.

You can disable in-app crash reporting at any time in Settings → Diagnostics. Once disabled, the Software will no longer send crash reports.

From this Website. When a page on aradar.app experiences a browser-side runtime exception, an anonymized error report may be sent to the same service. These reports may contain the error message, stack trace, browser version, and the page route where the error occurred.

The website does not collect your ARADAR library data, audio files, analysis results, or information entered into the desktop application.

1.2 License activation

When you activate your paid license, the Software sends your license key and email address (the one you used at purchase) to our license service and to Lemon Squeezy for verification. The license key and a short activation token are stored in your macOS Keychain so the Software can verify your entitlement on subsequent launches without re-contacting our servers daily.

The Software re-checks your license approximately every 30 days (or when network is available after an extended offline period) to confirm it is still valid. This is a single short HTTPS request to our license service.

1.3 Software updates (via Sparkle)

The Software periodically checks for updates by requesting an appcast.xml file from https://aradar.app/appcast.xml. This request is anonymous and contains the version of the Software you are running and standard HTTP headers (user-agent, language). We do not associate update checks with your license or identity.

1.4 Support inquiries

When you email us at our support address, we receive your message, your email address, and any information you choose to include (e.g. screenshots, logs you exported via Settings → Diagnostics).

1.5 Information from Lemon Squeezy at purchase

Lemon Squeezy collects your payment information, billing address, and tax-relevant location to process your purchase. Lemon Squeezy is the Merchant of Record. We receive a subset of this information: your email, name (if provided), license key, country of purchase, and purchase amount. We do not receive or store your payment card details.

2. Information We Do Not Collect

2.1 Cookies and Similar Technologies

By default, aradar.app sets no cookies, no local-storage analytics identifiers, and no visitor-tracking pixels. The four exceptions below are either (a) gated behind your explicit consent or (b) functional and scoped to a specific action you choose to take.

Analytics (consent-gated). If you click Accept all on the cookie consent banner, or grant the Analytics toggle in Cookie preferences, we load Google Analytics 4 via Google Tag Manager to count anonymous page-views and see which content is being read. This sets the following cookies on aradar.app:

• _ga – distinguishes unique visitors. First-party. Expires in 2 years.
• _ga_MSNJ7X6F – persists session state for our specific GA4 property. First-party. Expires in 2 years.

Until you grant consent, Google Analytics runs in Consent Mode v2 “denied” state – cookieless ping requests are sent so we can see aggregate page-view counts, but no identifiers, no cookies, and no cross-session linkage are stored. If you click Reject all, only these cookieless pings continue; no cookies are ever written. You can change your choice at any time via the Cookie preferences link in the site footer.

Marketing (only with your consent). If you click Accept all on the cookie banner, or turn on Marketing in Cookie preferences, we load the Meta Pixel (connect.facebook.net). It tells us which Meta ads lead to visits, downloads, checkouts and email sign-ups (the events PageView, Download, InitiateCheckout, Lead and NewsletterSignup). Meta may set the cookies _fbp and _fbc (90 days) on aradar.app. Without Marketing consent, the Pixel is not loaded and your browser sends nothing to Meta.

When you sign up for email with Marketing consent, and when you complete a purchase, our server also sends the same event to Meta through the Conversions API. It sends a SHA-256 hash of your email address, never the address itself.

Affiliate Attribution (conditional). If a visitor follows an affiliate link containing an ?aff=<id> parameter issued through the ARADAR affiliate program, a single cookie may be set for the purpose of attributing a future purchase to the referring affiliate.

This cookie contains only the affiliate identifier and is used solely for commission attribution. It is not used for advertising, behavioral tracking, profiling, or cross-site identification.

Visitors who do not arrive via an affiliate link will not receive this cookie.

Lemon Squeezy Checkout. When you click Buy ARADAR, a checkout experience provided by Lemon Squeezy may be loaded from infrastructure operated by Lemon Squeezy.

Lemon Squeezy may use cookies, session identifiers, or fraud-prevention technologies necessary to process purchases securely. Any such technologies are governed by Lemon Squeezy’s privacy policy and not by this Policy.

2.2 In the macOS app

ARADAR does not collect, transmit, or have access to:

• The audio content of your tracks.
• The filenames, file paths, or folder structure of your audio files.
• Track titles, artists, albums, labels, ratings, tags, or any metadata you enter into your library.
• Submission records, label contacts, or notes you enter.
• Your listening behavior, what you play, or for how long.
• Any waveform, frequency profile, or analysis data computed from your audio.
• Your IP address (our error reporting service is configured to discard IPs).
• Any device identifier other than what is required for license activation.

The library database (~/Library/Application Support/aradar/library.sqlite) and your audio files stay entirely on your computer.

3. How We Use Information

We use the limited information we collect only to:

• Validate your license and prevent unauthorized use.
• Diagnose and fix bugs (crash reports).
• Deliver software updates.
• Respond to your support inquiries.
• Process refund requests where applicable.
• Send release notes and trial emails to people who sign up through a form on this website, and release notes to customers who buy ARADAR. Every email has an unsubscribe link.
• If you grant Analytics consent: understand which pages on aradar.app visitors read most, so we can invest writing time where it’s useful and trim what isn’t. Aggregate page-view counts only; no behavioral profiling of individuals.

We do not sell your information. We use it for advertising only as described above: the Meta and Reddit pixels with your Marketing consent, and server-side conversion events for email sign-ups (Meta) and purchases (Meta and Reddit). We do not track what you do inside the macOS app; Google Analytics and the advertising pixels run only on the website.

4. Third-Party Services

Each of these services has its own privacy policy and is responsible for the data they collect and process. We have selected providers that publish privacy policies and offer the configuration controls necessary to limit data collection to the minimum required.

5. Data Retention

• Crash reports: retained by our error reporting service per their retention policy.
• License records: retained for the lifetime of the license and for a period thereafter as required for tax, accounting, and refund-window compliance (typically 7 years under Australian record-keeping law).
• Support inquiries: retained for as long as needed to respond and for a reasonable period thereafter for follow-up support.
• Update-check logs: anonymous, not linked to any identity, retained transiently in standard web server logs.

6. Your Rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate personal data.
• Delete your personal data (“right to be forgotten”) where lawful.
• Restrict or object to processing of your data.
• Port your data to another service.
• Withdraw consent for data processing where consent is the basis for processing.
• Lodge a complaint with your local data-protection authority (in Australia, the OAIC; in the EU, your national DPA; in the UK, the ICO).

To exercise any of these rights, email hello@aradar.app from the email address associated with your purchase. We will respond within 30 days.

For analytics-consent withdrawal specifically, you do not need to email us – open the Cookie preferences link in the site footer, toggle Analytics off, and Save. Your choice takes effect on the next page load and is remembered locally on your device. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

7. Children’s Privacy

ARADAR is intended for users aged 18 and over (or the age of majority in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

8. International Data Transfers

ARADAR is operated from Australia.

Some service providers we use, including our error reporting service and Lemon Squeezy, may process personal information in countries outside Australia, including the United States and countries within the European Union.

Where personal information is transferred internationally, we take reasonable steps to work with providers that maintain privacy and security safeguards appropriate to the information they process. These safeguards may include contractual protections, data-processing agreements, and recognized international transfer mechanisms where applicable.

9. Security

We protect the limited personal data we hold using industry-standard measures, including encrypted transmission (HTTPS/TLS), encrypted storage at rest in the macOS Keychain for license credentials, and access controls on our license service. No system is perfectly secure, and we cannot guarantee absolute security.

If a data breach occurs that affects your personal data, we will notify affected users and the relevant data-protection authority as required by applicable law.

10. California Residents (CCPA / CPRA)

If you are a California resident, you have the additional right to know what personal information we collect, the right to delete your personal information, and the right to opt out of any sale of personal information. We do not sell or share your personal information for cross-context behavioral advertising. To exercise CCPA rights, email hello@aradar.app.

11. EU and UK Residents (GDPR / UK GDPR)

If you are located in the EU, EEA, or UK, we process personal data on the following legal bases:

Contract.

• License validation
• Purchase administration
• Refund processing
• Customer support related to your license

Legitimate Interests.

• Diagnosing software crashes and errors
• Maintaining the security, stability, and reliability of the Software
• Delivering software updates
• Preventing fraud and unauthorized license use

Where appropriate, you may object to processing carried out on the basis of legitimate interests.

Consent.

• Website analytics via Google Analytics 4 (loaded through Google Tag Manager). Processed only after you click Accept all on the cookie consent banner or enable the Analytics toggle in Cookie preferences. Withdrawable at any time from the Cookie preferences link in the site footer.
• Release-notes newsletter subscription via the footer signup form. Voluntary; withdrawable by clicking the unsubscribe link in any newsletter email or by emailing us.
• Any other optional communications or features that explicitly request your consent.

Legal Obligation.

• Tax compliance
• Financial record retention
• Compliance with applicable laws and regulatory requirements

Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

12. Changes to This Policy

We may update this Policy as the Software evolves. The “Last updated” date at the top of the document indicates the most recent revision. Material changes will be communicated in-app or by email to registered license holders before taking effect.

13. Contact

For privacy inquiries, data-subject requests, or any concerns about this Policy:

• Email: hello@aradar.app
• Postal: Obliged Pty Ltd, PO Box 21, Caringbah NSW 1495, Australia

For general product support: hello@aradar.app.

See also: Terms of Use.