Privacy Policy

Effective November 11, 2026

Who we are

Harbor and the website harbordock.app are run by the Harbor team (“we”, “us”). If you have a question about your data, write to support@harbordock.app.

The website

• No third-party trackers. The site has no advertising, no tracking pixels, and no third-party analytics, fonts or scripts. Nothing about your visit is shared with anyone.
• Our own simple counts. So we know what people read, our server counts, in our own database: page views per page per day, downloads of Harbor, clicks on the Buy buttons, and the website that linked to us (its domain only, never the full address). To count unique visitors without cookies, we combine your IP address and browser type with a salt that changes every day and is never stored, and keep only the resulting scrambled code (a hash). We can’t turn it back into your IP address, and it can’t link your visits across days. The detailed rows are kept for 90 days, then rolled up into daily totals and deleted.
• Cookies. Browsing the site sets no cookies, and the counts above use none. If you sign in to your account, we set only the cookies sign-in needs: one that keeps you signed in (up to 30 days, or until you sign out) and short-lived ones that protect the sign-in forms. They are used for nothing else.
• Server logs. Like every website, our host records basic request details (IP address, browser type, page, time) to keep the site running and secure. We keep these logs for a short time (about 30 days) unless we need them to investigate abuse.
• License recovery and sign-in. When you enter your email to get your keys or a sign-in code, we use it only to send that email. To stop abuse we limit how often this can happen, using your IP address and a scrambled (hashed) copy of the email. We also count codes sent, successful sign-ins and failed attempts.

When you buy Harbor

Purchases are handled by our reseller and merchant of record, Lemon Squeezy. They collect your payment details, billing address and email, charge you, handle sales tax, and send your receipt, under their own privacy policy. We never see your full card number.

From each order we receive your name, email address, country, what you bought, the price and an order number. We use these to create and email your license key, to let you sign in to your account, to answer support questions, to process refunds, and to keep the records the law requires.

The Harbor app

Harbor contains no third-party analytics, advertising or tracking code. Your layout, widgets, notes, themes and settings are stored on your Mac, in ~/Library/Application Support/Harbor.

What Harbor sends to us

• License activation and check-ins. When you activate a license, and about once a month after that, Harbor sends us your license key, the app version, your Mac’s name (for example “Sam’s MacBook Air”, so you can tell your Macs apart) and a device code. The device code is a one-way fingerprint made from your Mac’s hardware ID; we never receive the hardware ID itself. We use this only to enforce the 3-Mac limit and to show you which Macs use your license.
• Signing in. If you sign in to your account inside Harbor, it keeps a sign-in token in your Mac’s keychain and sends it with account requests.
• Update checks. Harbor checks our website for new versions (you can turn this off in Settings › Updates). The request says which Harbor version and build and which macOS version you have. We count these checks per day the same way as page views (a daily-salted hash of your IP address and that information, never the raw IP), to see roughly how many Macs use each version. The detailed rows are kept for 90 days, then rolled up into daily totals.

What stays on your Mac

• Calendars and reminders, read through macOS with your permission, only to show them in the dock.
• Now Playing, system meters, badges and minimized windows, read from macOS on your Mac.
• Notes and Edge Notes. Notes you write in Harbor, and their link to Apple Notes, stay on your Mac (and in your own iCloud if you use Apple Notes with iCloud).
• Claude usage. The widget reads the usage logs that Claude Code keeps on your Mac.
• Clipboard history. If you add the Clipboard widget, Harbor keeps a history of what you copy (text, links, pictures, file locations and colours), with the time and the name of the app you copied from, so you can paste earlier items again. Harbor reads the clipboard only while a Clipboard widget is on your dock, and only after you allow it in macOS (Privacy & Security › Paste from Other Apps). The history stays on your Mac: it is saved in Harbor’s folder in your user Library, readable only by your user account and left out of Time Machine backups, or kept only in memory if you turn off “Keep history after restart”. It is never sent to us or anyone else, and is never part of analytics, diagnostics or license checks. Items that apps mark as private or temporary, such as passwords from password managers, are never saved, and neither is anything copied in apps on the widget’s “Ignore these apps” list (which starts with common password managers). You can pause recording, delete single items or clear the whole history at any time.

Services Harbor contacts directly, only if you use them

• Weather. The Weather widget asks Open-Meteo for the forecast of the place you chose or your approximate location (rounded to about 1 km). No account and nothing else about you is sent with it. We don’t see these requests.
• Stocks. The Stocks widget asks Yahoo Finance (or Finnhub, with your own key) for the symbols on your watchlist. Those requests go from your Mac straight to that provider; they carry the symbols and an app name, never your account or license. Your Finnhub key, if you add one, is kept in your Mac’s keychain.
• Public IP address. The Network widget’s panel can show your public IP address, but only when you click “Show public IP”. That click asks api.ipify.org for it; the answer is forgotten when the panel closes.
• Claude plan limits. If you choose to sign in to Claude in the widget, Harbor talks to Anthropic’s servers with your own session to read your plan’s usage. The session is kept in your Mac’s keychain and never sent to us. Anthropic’s privacy policy covers those requests.

How long we keep data

• Orders and licenses: as long as your license exists, and afterwards as long as tax and accounting law requires (typically up to 7 years).
• Activated Macs: until you deactivate or remove the Mac, or ask us to delete it.
• Support emails: up to 3 years after your last message, so we can help if the problem comes back.
• Rate-limit records and sign-in codes: hours to days.

Who we share it with

We don’t sell or rent personal data, and we don’t share it for advertising. We share it only with the companies that help us run Harbor, and only what they need: our merchant of record (Lemon Squeezy), our web host, and our email delivery provider. We may disclose data if the law requires it.

Your choices and rights

You can ask us for a copy of your data, to correct it, or to delete it, by writing to support@harbordock.app from your purchase email. Depending on where you live (for example the EU, the UK or California) you may have further rights, including to object to processing or to complain to your data protection authority. Deleting your license data means we can no longer verify your license, so we’ll explain what that means before we do it.

Where the GDPR applies, we rely on: performing our contract with you (licenses, activation, support), our legitimate interest in keeping the service secure (logs, rate limits), and legal obligations (tax records).

Children

Harbor isn’t directed at children under 13, and we don’t knowingly collect their data.

Security

The site and API use HTTPS only. Sign-in codes and sign-in sessions are stored only in scrambled (hashed) form, and access to our systems is limited to the people who run Harbor.

Changes

If we change this policy we’ll update the date above, and for important changes we’ll say so on this site or by email.