This policy explains how PeekHarbor and its website (peekharbor.app) handle your information. PeekHarbor is made by palamto, an individual in Thailand. Stripe is the payment processor. palamto is the seller.
PeekHarbor is for people 18 or older. It requires macOS 14 Sonoma or later, Apple silicon.
The short version
- Your bookmarks and folders live on your Mac. If you turn on iCloud Sync, they go to your private iCloud database. palamto cannot read that library.
- Accessibility permission is used on your Mac to find the link under your pointer or read selected text. That content is not sent to palamto.
- Purchases and licenses use your email, Stripe as the payment processor, and a license record so you can activate the app and manage keys in the Dashboard. You enter payment details on Stripe’s page. palamto does not receive card numbers.
- PeekHarbor does not use third-party analytics or crash reporting.
1. Who’s responsible for your data
For the website, license accounts, and support, the person responsible is palamto, an individual in Thailand. Contact support@peekharbor.app or X @palamto.
For the payment, Stripe, the payment processor, handles the details you enter on Stripe’s page under its own privacy policy. palamto is the seller.
Apple provides iCloud and CloudKit. Resend sends sign-in and license email. Cloudflare hosts the site.
2. What the Mac app handles
Bookmarks saved on your Mac
PeekHarbor stores the bookmarks and folders you save, including names, URLs, folder colors, and their order, in a local file on your Mac (`~/Library/Application Support/PeekHarbor/Bookmarks.json`). It can also cache bookmark titles, descriptions, thumbnails, and site icons on this Mac (up to 256 cards; macOS may clear this cache). Removing a bookmark also removes its cached card.
PeekHarbor does not import your browser cookies. It does not keep a history of pages you preview, or an analytics log. It stores only the bookmarks you choose to save, plus that local cache.
iCloud Sync (CloudKit), if you turn it on
iCloud Sync is optional. It stays off until you turn on Sync bookmarks and folders in Settings. When it is on, PeekHarbor uses the Apple Account signed into macOS and writes your bookmark library (URLs, names, folders, and their order) to your private iCloud database for this app. It also keeps a local copy so you can use it offline.
That library is private to the iCloud account on the Mac. palamto cannot read your iCloud bookmarks. If PeekHarbor detects a different Apple Account, it pauses sync until you confirm that you want to merge the local library into that account.
Apple’s own iCloud terms and privacy policy also apply to this sync.
Accessibility permission
When you use a preview or bookmark shortcut, PeekHarbor uses Accessibility to read a link URL or the selected text exposed by the source app. These shortcuts leave the clipboard unchanged.
The app does not request Automation or Input Monitoring. This reading happens on your Mac. palamto’s servers do not receive the contents of other apps, your pointer position, or your pasteboard.
If you preview a link, the destination website receives a request. When you use the Preview shortcut on selected plain text, PeekHarbor sends that text to Google Search as the search query.
Previews and bookmark artwork
When you preview a link, PeekHarbor loads it in a WebKit preview on your Mac. The website at that URL receives a normal request from your computer. It may load other resources, set its own cookies in that preview, or count a visit. Each preview uses a fresh, temporary website data store that is discarded when you close the preview.
For saved bookmarks, the app may request a site icon, title, description, or thumbnail from the bookmark’s site. It takes extra care with some short links and with URLs that look like sign-in or one-time links. Those requests go from your Mac to those sites, not through palamto.
Those websites have their own privacy practices. PeekHarbor cannot control what they collect.
Analytics and crash reports
PeekHarbor does not use third-party analytics, telemetry, or crash reporting. It does not keep an analytics log or a history of URLs you preview.
macOS may create diagnostic or crash logs on your Mac, according to your system settings. PeekHarbor does not upload those logs.
3. What the website, checkout, and licenses collect
The site runs on SvelteKit. Sign-in uses Better Auth. Email is sent with Resend. Cloudflare hosts the site.
Your purchase email and license records
When you buy a license, we use the purchase email to issue your license keys and to let you sign in to the Dashboard. Each key is tied to that email. One purchase can include more than one key. Keys bought with the same email are shown together in the Dashboard.
palamto may store your email address, an encrypted copy of the license key, whether it is active, and a purchase ID so a payment is not fulfilled twice.
Paying through Stripe
Stripe is the payment processor. The seller is palamto. You enter payment details on Stripe’s page. Stripe handles those details under its own privacy policy. palamto does not receive or store your card numbers.
Stripe sends palamto the order details needed to issue the license and handle a refund or a dispute: the email, the amount, the quantity, and the country if you provide one. palamto does not receive card numbers.
A license is a one-time payment, with lifetime updates and no subscription. There is no free trial.
Signing in with a magic link
To open the Dashboard, you sign in with your purchase email. We email you a magic link (a one-time sign-in link, sent with Resend). Opening it creates a Better Auth session so you can see your keys and deactivate a Mac.
This can include your email, the magic-link token (until it expires or is used), session cookies or tokens, and basic security logs such as the time you signed in.
Activating a key on your Mac
Each key may be used on one active Mac at a time. To move a key, choose Move to another Mac in the Dashboard or Deactivate in Settings → License on the current Mac, then use the same key on the new Mac. If the old Mac is offline, it may keep using its last verified license until it checks again or its offline access expires.
We store the Mac’s name, the app version, a device ID derived from the Mac’s public key, the public key itself, and the activation status and dates. The matching private key stays on the Mac in the Keychain or Secure Enclave. The Dashboard can show the Mac’s name and activation date.
The app checks the license online at activation and periodically while online. A check sends the license key, device ID, timestamp, and a signature generated on the Mac. Local features remain available for 14 days after the last successful check. For 3 more days, they remain available and Settings → License shows Check needed soon. After that, the license requires another successful check. Loading websites in Preview, Google searches, and iCloud Sync require internet access.
Website hosting logs
Cloudflare hosts the website. Typical hosting or CDN logs may include IP address, date and time, the URL requested, the referrer, and browser or device information. Those logs are used for security, reliability, and preventing abuse.
When you email support
If you write to support@peekharbor.app, palamto receives what you include in the message, and the email metadata that comes with it, in order to reply.
4. How your information is used
- To provide the app, previews, bookmarks, and optional sync.
- To take payment, issue and enforce licenses, and show the Dashboard.
- To send sign-in or license email you asked for.
- To respond to support, refund, or deletion requests.
- To protect against abuse, fraud, and unauthorized access.
PeekHarbor does not sell your personal information.
5. Who receives it
palamto passes on data only as needed to run PeekHarbor:
- Stripe, the payment processor, for the payment details you enter on Stripe’s page, and for refunds and disputes.
- Apple, for iCloud and CloudKit if you turn on sync, and for Developer ID and notarization services.
- Google, for the search query when you preview selected plain text.
- Resend, to deliver magic links and license emails.
- Cloudflare, to host the website and provide related network services.
- Professional advisors or authorities, if the law requires it, or to protect legal rights.
Websites you preview, or whose artwork is fetched, receive the request directly from your Mac. palamto does not send those requests.
6. How long it’s kept
If you request deletion, we delete eligible account, support, purchase, and hosting records within 30 days. We keep the license key and activation records for as long as needed to administer an existing license. We also keep records we are legally required to retain, such as applicable tax records. We delete or anonymize retained records once they are no longer needed and any applicable legal retention period has ended.
Magic-link tokens last only until they are used or they expire. Sessions last until you sign out or they expire. Bookmarks on your Mac and in your iCloud stay until you delete them. Stripe keeps its own payment records under its own policy.
7. Your choices and your rights
You can:
- Decline Accessibility permission. Preview and related shortcuts will not work as designed.
- Leave iCloud Sync off, or turn it off later.
- Deactivate a Mac in the Dashboard or in Settings → License, then activate the key on another Mac.
- Ask palamto to correct the email on a license or to delete personal data at support@peekharbor.app or X @palamto. See How long it’s kept for the deletion timeline and retention rules.
palamto is an individual in Thailand, so Thailand’s Personal Data Protection Act (PDPA) applies. It gives you the right to access, correct, or delete personal data, and to withdraw consent, except where the law requires us to keep something.
Deleting website or license data does not erase bookmarks on your Mac or in your iCloud account. You can delete those on the Mac, and you can manage iCloud data through your Apple Account.
A full refund revokes all license keys in that order. A partial refund does not revoke them. A payment dispute puts the order’s keys on hold for new activations. A Mac already active on a held key can still verify its license. The Terms of Service explain these license actions. For deletion requests, see How long it’s kept.
8. Age
PeekHarbor is for people 18 or older. It is not directed at children.
9. Where your data is processed
palamto is in Thailand, and the laws of Thailand apply. Stripe, Resend, Cloudflare, and Apple may process data in other countries. Their own privacy policies apply to the services they provide.
10. When this policy changes
We may update this Policy. The updated version is posted on this page with a new "Last updated" date. We do not send an email about the change.
11. Questions? Get in touch
Questions about privacy, or requests to delete data: support@peekharbor.app or X @palamto.