Privacy Policy

Last updated October 26, 2026

The short version

The app collects nothing. Buying it shares with Paddle only what's needed to take your payment, and we keep your email address only to send you your key and help you.

Who is responsible

Boyucheng Zhang is the controller of the personal data described here. Questions or requests: hi@boyucheng.me.

The app

Pumpkin Lights has no analytics, no tracking and no accounts. Its only network request is a check for updates on this site (about once a day, and you can turn it off in Settings); like any web request it reveals your IP address and the app's version, and nothing else. Your licence key is checked on your Mac, offline. Your settings stay on your Mac. If you turn on the bulb's glass refraction, the app reads the small patch of screen behind the bulb to draw it bent; that image is processed in memory, live, and is never saved or sent anywhere.

Buying

Paddle.com, our Merchant of Record, collects your name, email, country and payment details to process your order, calculate tax and prevent fraud, under its own privacy policy: paddle.com/legal/privacy. From Paddle we receive your email address, country and order details.

What we keep, why, and for how long

We keep your order number, the licence key made for it and your email address so we can email you the key, show it to you again and help you if you contact us — this is needed to deliver what you bought. We keep them for as long as your licence exists, and delete them sooner if you ask (you'd then need your key email to restore it). Support emails are kept as long as needed to answer them. We never sell your data or send marketing email.

Who we share it with

Only the services that run the store: Paddle (payments), and Cloudflare, which hosts this site, stores order records and sends the key email. They process data on our behalf. We may also share data where the law requires it.

This website

Cloudflare processes standard request data (such as IP addresses) to serve and protect the site. We use no analytics or advertising cookies. Paddle's checkout may set cookies needed to complete a purchase. After you buy, the thanks page remembers your order number in your browser's local storage so it can show your key again.

Security

Order records are kept on Cloudflare's infrastructure, encrypted in transit, and only we can access them.

Your rights

You can ask what we hold about you, ask us to correct or delete it, object to how we use it, or ask for a copy — write to hi@boyucheng.me and we'll reply within a month. You can also complain to your local data protection authority. For payment data, you can contact Paddle directly.

Contact

Boyucheng Zhang · hi@boyucheng.me