Privacy Policy

Last updated: 18 May 2026

Who we are

The controller responsible for processing your personal data under the GDPR is:

Coolplay GmbH
Lindengasse 43/19
1070 Wien, Austria
Email: office@coolplay.io

Summary

WindowHopper itself runs fully on your Mac and does not connect to our servers, send telemetry, or transmit your data to us. The only personal data we process is what you give us when you buy the app and what your browser sends when you visit this website. We do not sell your data and we keep what we collect to the minimum.

The app (WindowHopper for macOS)

• No telemetry. The app does not call our servers in normal use. It indexes windows and tabs locally on your Mac only.
• Software updates. Once installed, the app may check for updates via Sparkle by fetching a public update feed (appcast). This produces standard HTTP server logs (your IP, timestamp, version requested) on our hosting provider; we do not link those logs to a customer identity. You can disable update checks in the app's preferences.
• Accessibility permission. macOS requires you to grant Accessibility permission so the app can read window titles and switch between windows. That data stays on your Mac.

The website (window-hopper.com)

When you visit this site, our hosting provider (Firebase Hosting, operated by Google) processes standard server log data, including your IP address, browser type, referring URL, and timestamps. This is necessary to operate the site (legal basis: GDPR Art. 6(1)(f) — legitimate interest in providing and securing the site).

Google Ads conversion tracking

We use the Google Ads tag (gtag.js, ID AW-413440870) to measure how many visitors arriving from a Google Ads click go on to buy WindowHopper. The tag is loaded with Google Consent Mode v2; on first visit it defaults to denied for ad-storage, ad-user-data, ad-personalization, and analytics-storage. No cookies are written and no personal data is sent to Google unless you click Accept on our cookie banner.

If you accept, the tag sets first-party cookies on window-hopper.com and, when you complete a purchase, sends a conversion event (the Google Ads click ID, the order value, currency, and the Paddle transaction ID) to Google so the click can be matched back to its ad. Legal basis: your consent (Art. 6(1)(a) GDPR; § 165 Abs. 3 TKG 2021 for storing or reading information on your device). You can withdraw consent at any time by clearing your browser data — the banner will reappear and your prior choice will not be reused.

Recipient: Google Ireland Limited, with onward transfer to Google LLC (USA) under the Standard Contractual Clauses and the EU-US Data Privacy Framework. See Google's privacy policy.

Google Analytics 4

We also use Google Analytics 4 (measurement ID G-6Z78WPKKNS) to understand which pages and on-page actions matter — for example, which Download button or simulator interaction is clicked most. Like the Google Ads tag, GA4 is loaded with Consent Mode v2: it defaults to denied for analytics-storage and only writes a first-party _ga cookie if you click Accept on our cookie banner.

When granted, GA4 collects page views, scroll depth, outbound link clicks, file downloads, and the custom button-click events we emit (download buttons, demo controls). IP addresses are truncated by Google before storage; no other directly identifying data is sent. Legal basis: your consent (Art. 6(1)(a) GDPR; § 165 Abs. 3 TKG 2021). You can withdraw consent at any time by clearing your browser data — the banner will reappear.

Recipient: Google Ireland Limited (same as Google Ads above), under the Standard Contractual Clauses and the EU-US Data Privacy Framework.

When you buy WindowHopper

Purchases are processed by Paddle.com Market Ltd. ("Paddle"), our merchant of record. Paddle collects the data needed to process your payment (name, email, billing address, payment method details, country, IP for fraud prevention). Paddle is the controller for the payment-processing activity; see Paddle's privacy policy.

Coolplay GmbH receives a record of the purchase (your name, email, transaction ID, and amount) so that we can fulfill the licence, provide support, and meet our tax record-keeping obligations. Legal basis: contract performance (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c)).

Recipients of your data

• Paddle — payment processing, invoicing, sales tax.
• Google (Firebase Hosting) — website hosting infrastructure.
• Google (Google Ads) — only if you accept the cookie banner; for measuring ad-driven purchases.
• Google (Google Analytics 4) — only if you accept the cookie banner; for usage analytics.
• Tax authorities and other regulators where we are legally required to share data.

We do not sell or rent your personal data. Some of the providers above are located outside the EU/EEA. Transfers rely on the Standard Contractual Clauses or equivalent safeguards.

How long we keep your data

Purchase records are kept for as long as required under Austrian commercial and tax law (typically up to 7 years per § 132 BAO). Server logs are kept for a short period for security and debugging. Email correspondence is kept for as long as needed to address your request, plus a reasonable archival period.

Your rights under the GDPR

You have the right to:

• access the personal data we hold about you (Art. 15);
• have inaccurate data corrected (Art. 16);
• have your data deleted, subject to retention obligations (Art. 17);
• restrict processing (Art. 18);
• data portability (Art. 20);
• object to processing based on legitimate interest (Art. 21);
• withdraw consent at any time where processing is based on consent.

To exercise any of these rights, email office@coolplay.io. You also have the right to lodge a complaint with a supervisory authority in your EU member state.

Cookies

A consent banner appears on your first visit. If you decline, no tracking cookies are written. If you accept, the Google Ads tag writes first-party cookies on window-hopper.com (_gcl_*) to remember which ad click brought you. The browser may also store small amounts of technical data (such as the embedded simulator's session state) that aren't used for tracking.

Your consent choice is saved in your browser's localStorage (key wh_consent) so the banner doesn't ask you again. To revoke consent, clear the site data for window-hopper.com and the banner will reappear.

Changes

If we change this policy materially, we will update the "Last updated" date and, where appropriate, notify you by email.