Privacy Policy
Last updated 9 September 2026
The short version: the application never connects to the internet, and the website keeps the least it can get away with. The rest of this page is that statement, in detail.
The app does not phone home. SpaceShift on your computer makes no network connections at all. It does not send us your window titles, the programs you run, your settings, your layouts, usage statistics, crash reports or anything else. Licence checks happen entirely on your machine. There is nothing to opt out of, because there is nothing being sent.
What the website stores
An account exists so you can hold a licence, so the website stores:
- Your email address, which is also how you sign in.
- A hash of your password, produced with PBKDF2. The password itself is never stored and cannot be recovered from the hash, by us or by anyone who obtained the database.
- Your System ID, a fingerprint of the computer a licence is issued for. It is derived from a Windows installation identifier and cannot be turned back into anything about you or your hardware.
- Your licence keys and order records, so you can see what you bought and move a licence to a new computer.
- Optional billing details you type into your account page yourself, such as a name, company or address. Leave them empty and nothing is stored.
What stays on your computer
Your settings, saved layouts, jump slots, exclusion list and the record of your demo period live on your own machine, in your Windows user folder, the registry and shared program data. They are never uploaded. Uninstalling removes the application; you can delete the remaining data folders yourself if you want nothing left behind.
What we do not do
- No analytics, no tracking pixels, no advertising, and no third-party scripts on this site.
- No profiling, no automated decisions about you, and no selling or sharing of your data.
- No marketing email unless you ask for it. Mail we send is transactional: confirming an address, resetting a password, delivering a licence.
Cookies
Two, both strictly necessary and both first-party. ss_session keeps you signed in
after you log in, and ss_pending exists briefly so that clicking your email
confirmation link in the browser you signed up with logs you straight in. There are no analytics or
advertising cookies, which is why this site has no cookie banner asking you to accept any.
Who processes data on our behalf
- Cloudflare hosts the website and the account database.
- Resend sends the transactional emails described above.
- Our payment provider handles purchases as merchant of record. They collect the payment details; we never see or store your card number. What comes back to us is the fact of a completed order.
How long it is kept
Account and licence records are kept while your account exists, because they are what proves you own a licence. Sign-in sessions expire on their own. Password reset links expire after an hour and are destroyed once used. Ask us to delete your account and we delete it, along with the licences on it, which means those licences stop working.
Your rights
You can ask for a copy of what we hold, ask for it to be corrected, or ask for it to be deleted. Email [email protected] from the address on the account and we will action it. There is no form and no waiting on a ticket queue.
Children
SpaceShift is a tool for people who use a desktop computer for work. It is not directed at children, and we do not knowingly create accounts for anyone under 16.
Changes
If this policy changes, the date at the top changes with it. Changes that affect what we collect will be described here, not slipped in.