Your Mac. Your space.

Privacy, by design.

Duo’s development build processes lid movement and desktop effects locally on your Mac. Desktop frames stay in memory; they are not saved or uploaded. Audio is not captured.

You’re in control.

The preview works without Screen Recording permission. Duo requests permission only when you enable desktop effects. Turn effects off at any time, or press Escape while the effect is visible.

Licensing, without desktop data.

When you activate or verify Duo, your license key, a randomly generated activation identifier, and standard network information are sent to Polar over HTTPS. Keys are stored in your Mac’s Keychain. No screen pixels, files, computer name, or hardware serial number are sent for licensing. Validation runs at launch, after waking, and hourly. A previously verified license can work offline for up to seven days.

Purchases and the Duo counter.

Polar handles checkout, receipts, and customer-portal access. The website requests an aggregate purchase count from a Cloudflare Worker. The counter stores order identifiers, their update time, and whether they count as a paid purchase; it does not store customer names, emails, or payment details. Full refunds are excluded. These service providers process ordinary request information such as IP addresses.

Private order administration.

For customer support and sales reporting, our restricted admin service can sync customer names and email addresses, order dates, amounts, currency, payment and refund status, and masked license records from Polar into Cloudflare D1. Full license keys, card details, billing addresses, and desktop content are not stored in this reporting database. Authorized administrators can view current activation labels and dates from Polar and export reports. Access requires a verified admin login; refreshes and exports are logged with the administrator, time, and outcome. Reports are replaced when a complete new snapshot is available. None of these customer records are available through the public purchase counter.

No desktop telemetry.

Duo has no advertising, screen-content telemetry, analytics SDK, or automatic update checks. Licensing traffic and the website’s purchase-counter request are separate from the local desktop effect.