About this document
This document is the Privacy Policy (“Policy”) for ARADAR(“the Software”, “the App”). It explains what limited personal data we collect, how we use it, and what rights you have regarding that information.
ARADAR is operated by Obliged Pty Ltd (ACN 669 540 201, ABN 28 669 540 201), a company registered in New South Wales, Australia, with registered address at PO Box 21, Caringbah NSW 1495, Australia(“we”, “us”, “our”).
We take privacy seriously and have designed ARADAR to collect as little data as possible. Most of your library, audio files, and analysis results never leave your computer.
1. Information We Collect
1.1 Crash Reports
We use a third-party error reporting service to collect crash and error reports from two surfaces: the macOS Software itself and this marketing website at aradar.app.
From the Software. When ARADAR crashes or encounters an error, we collect a report containing the type of error, the part of the code where it occurred, the version of the Software, and your operating system version.
Before transmission, we scrub personally identifying information from these reports. File paths containing usernames are stripped, IP addresses are not retained by us, and audio content is never included in crash reports.
You can disable in-app crash reporting at any time in Settings → Diagnostics. Once disabled, the Software will no longer send crash reports.
From this Website. When a page on aradar.app experiences a browser-side runtime exception, an anonymised error report may be sent to the same service. These reports may contain the error message, stack trace, browser version, and the page route where the error occurred.
The website does not collect your ARADAR library data, audio files, analysis results, or information entered into the desktop application.
1.2 Licence activation
When you activate your paid licence, the Software sends your licence key and email address (the one you used at purchase) to our licence service and to Lemon Squeezy for verification. The licence key and a short activation token are stored in your macOS Keychain so the Software can verify your entitlement on subsequent launches without re-contacting our servers daily.
The Software re-checks your licence approximately every 30 days (or when network is available after an extended offline period) to confirm it is still valid. This is a single short HTTPS request to our licence service.
1.3 Software updates (via Sparkle)
The Software periodically checks for updates by requesting an appcast.xml file from https://aradar.app/appcast.xml. This request is anonymous and contains the version of the Software you are running and standard HTTP headers (user-agent, language). We do not associate update checks with your licence or identity.
1.4 Support enquiries
When you email us at our support address, we receive your message, your email address, and any information you choose to include (e.g. screenshots, logs you exported via Settings → Diagnostics).
1.5 Information from Lemon Squeezy at purchase
Lemon Squeezy collects your payment information, billing address, and tax-relevant location to process your purchase. Lemon Squeezy is the Merchant of Record. We receive a subset of this information: your email, name (if provided), licence key, country of purchase, and purchase amount. We do not receive or store your payment card details.
2. Information We Do Not Collect
2.1 Cookies and Similar Technologies
By default, aradar.app sets no cookies, no local-storage analytics identifiers, and no visitor-tracking pixels. The four exceptions below are either (a) gated behind your explicit consent or (b) functional and scoped to a specific action you choose to take.
Analytics (consent-gated). If you click Accept all on the cookie consent banner, or grant the Analytics toggle in Cookie preferences, we load Google Analytics 4 via Google Tag Manager to count anonymous page-views and see which content is being read. This sets the following cookies on aradar.app:
_ga– distinguishes unique visitors. First-party. Expires in 2 years._ga_MSNJ7X6F– persists session state for our specific GA4 property. First-party. Expires in 2 years.
Until you grant consent, Google Analytics runs in Consent Mode v2 “denied” state – cookieless ping requests are sent so we can see aggregate page-view counts, but no identifiers, no cookies, and no cross-session linkage are stored. If you click Reject all, only these cookieless pings continue; no cookies are ever written. You can change your choice at any time via the Cookie preferences link in the site footer.
Marketing (consent-gated, currently inactive). The consent banner also offers a Marketing toggle reserved for future ad-pixel tags (e.g. Meta, Reddit, LinkedIn). No marketing tags are configured today; granting this toggle has no effect until one is added, at which point this Policy will be updated to name the specific cookies set.
Affiliate Attribution (conditional). If a visitor follows an affiliate link containing an ?aff=<id> parameter issued through the ARADAR affiliate program, a single cookie may be set for the purpose of attributing a future purchase to the referring affiliate.
This cookie contains only the affiliate identifier and is used solely for commission attribution. It is not used for advertising, behavioural tracking, profiling, or cross-site identification.
Visitors who do not arrive via an affiliate link will not receive this cookie.
Lemon Squeezy Checkout. When you click Buy ARADAR, a checkout experience provided by Lemon Squeezy may be loaded from infrastructure operated by Lemon Squeezy.
Lemon Squeezy may use cookies, session identifiers, or fraud-prevention technologies necessary to process purchases securely. Any such technologies are governed by Lemon Squeezy’s privacy policy and not by this Policy.
2.2 In the macOS app
ARADAR does not collect, transmit, or have access to:
- The audio content of your tracks.
- The filenames, file paths, or folder structure of your audio files.
- Track titles, artists, albums, labels, ratings, tags, or any metadata you enter into your library.
- Submission records, label contacts, or notes you enter.
- Your listening behaviour, what you play, or for how long.
- Any waveform, frequency profile, or analysis data computed from your audio.
- Your IP address (our error reporting service is configured to discard IPs).
- Any device identifier other than what is required for licence activation.
The library database (~/Library/Application Support/aradar/library.sqlite) and your audio files stay entirely on your computer.
3. How We Use Information
We use the limited information we collect only to:
- Validate your licence and prevent unauthorised use.
- Diagnose and fix bugs (crash reports).
- Deliver software updates.
- Respond to your support enquiries.
- Process refund requests where applicable.
- Send release-notes emails to visitors who explicitly subscribe via the footer signup form (see §4, Lemon Squeezy).
- If you grant Analytics consent: understand which pages on
aradar.appvisitors read most, so we can invest writing time where it’s useful and trim what isn’t. Aggregate page-view counts only; no behavioural profiling of individuals.
We do not use your information for advertising, marketing profiling, behavioural targeting, or sale to third parties. We do not run analytics that track your in-app behaviour (Google Analytics is loaded only on the website, never inside the macOS app).
4. Third-Party Services
| Service | Purpose | Data shared |
|---|---|---|
| Lemon Squeezy | Payment, tax handling, licence issuance (Merchant of Record); email-list management for the release-notes newsletter when you subscribe via the footer signup form | Email, name, billing/tax details, purchase amount; email address only (for newsletter subscribers) |
| Google LLC (Google Analytics 4 + Google Tag Manager) | Aggregate website analytics on aradar.app. Loaded only after you grant Analytics consent via the cookie banner. Runs in Consent Mode v2: until consent is granted, only cookieless ping requests are sent (no identifiers, no cookies) | Pseudonymous page-view events, referring URL, coarse geolocation (country-level), browser / device class. IP addresses are anonymised at Google’s ingestion edge per GA4 defaults. No PII, no purchase data, no in-app behaviour |
| Error reporting service | Crash and error reporting (Software + this website) | Scrubbed crash reports; usernames in file paths stripped, IPs not retained, no audio content |
| aradar.app (Sparkle update delivery) | Auto-update mechanism | Anonymous version-check request |
Each of these services has its own privacy policy and is responsible for the data they collect and process. We have selected providers that publish privacy policies and offer the configuration controls necessary to limit data collection to the minimum required.
5. Data Retention
- Crash reports: retained by our error reporting service per their retention policy.
- Licence records: retained for the lifetime of the licence and for a period thereafter as required for tax, accounting, and refund-window compliance (typically 7 years under Australian record-keeping law).
- Support enquiries: retained for as long as needed to respond and for a reasonable period thereafter for follow-up support.
- Update-check logs: anonymous, not linked to any identity, retained transiently in standard web server logs.
6. Your Rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate personal data.
- Deleteyour personal data (“right to be forgotten”) where lawful.
- Restrict or object to processing of your data.
- Port your data to another service.
- Withdraw consent for data processing where consent is the basis for processing.
- Lodge a complaint with your local data-protection authority (in Australia, the OAIC; in the EU, your national DPA; in the UK, the ICO).
To exercise any of these rights, email hello@aradar.app from the email address associated with your purchase. We will respond within 30 days.
For analytics-consent withdrawal specifically, you do not need to email us – open the Cookie preferences link in the site footer, toggle Analytics off, and Save. Your choice takes effect on the next page load and is remembered locally on your device. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
7. Children’s Privacy
ARADAR is intended for users aged 18 and over (or the age of majority in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
8. International Data Transfers
ARADAR is operated from Australia.
Some service providers we use, including our error reporting service and Lemon Squeezy, may process personal information in countries outside Australia, including the United States and countries within the European Union.
Where personal information is transferred internationally, we take reasonable steps to work with providers that maintain privacy and security safeguards appropriate to the information they process. These safeguards may include contractual protections, data-processing agreements, and recognised international transfer mechanisms where applicable.
9. Security
We protect the limited personal data we hold using industry-standard measures, including encrypted transmission (HTTPS/TLS), encrypted storage at rest in the macOS Keychain for licence credentials, and access controls on our licence service. No system is perfectly secure, and we cannot guarantee absolute security.
If a data breach occurs that affects your personal data, we will notify affected users and the relevant data-protection authority as required by applicable law.
10. California Residents (CCPA / CPRA)
If you are a California resident, you have the additional right to know what personal information we collect, the right to delete your personal information, and the right to opt out of any sale of personal information. We do not sell or share your personal information for cross-context behavioural advertising. To exercise CCPA rights, email hello@aradar.app.
11. EU and UK Residents (GDPR / UK GDPR)
If you are located in the EU, EEA, or UK, we process personal data on the following legal bases:
Contract.
- Licence validation
- Purchase administration
- Refund processing
- Customer support related to your licence
Legitimate Interests.
- Diagnosing software crashes and errors
- Maintaining the security, stability, and reliability of the Software
- Delivering software updates
- Preventing fraud and unauthorised licence use
Where appropriate, you may object to processing carried out on the basis of legitimate interests.
Consent.
- Website analytics via Google Analytics 4 (loaded through Google Tag Manager). Processed only after you click Accept all on the cookie consent banner or enable the Analytics toggle in Cookie preferences. Withdrawable at any time from the Cookie preferences link in the site footer.
- Release-notes newsletter subscription via the footer signup form. Voluntary; withdrawable by clicking the unsubscribe link in any newsletter email or by emailing us.
- Any other optional communications or features that explicitly request your consent.
Legal Obligation.
- Tax compliance
- Financial record retention
- Compliance with applicable laws and regulatory requirements
Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
12. Changes to This Policy
We may update this Policy as the Software evolves. The “Last updated” date at the top of the document indicates the most recent revision. Material changes will be communicated in-app or by email to registered licence holders before taking effect.
13. Contact
For privacy enquiries, data-subject requests, or any concerns about this Policy:
- Email: hello@aradar.app
- Postal: Obliged Pty Ltd, PO Box 21, Caringbah NSW 1495, Australia
For general product support: hello@aradar.app.