Privacy policy
What data we process, why, for how long, and how to exercise your rights. The software itself transmits nothing.
English version, provided for information. The French version is the one that prevails.Lire en français
Last revised: August 1, 2026
This document is a draft: it has not yet been reviewed by a legal professional and is not enforceable as it stands. It is shown rather than hidden, so that nothing is sold on invisible terms.
1. The principle
The Cooked app sends no data. No telemetry, no machine identifier, no usage statistics. Your battery measurements are read and displayed locally; they never leave your Mac.
The only data we process is what you give us voluntarily by creating an account or buying a license on this site. This policy describes exactly what that is.
We also undertake never to offer to unlock a feature in exchange for sharing your data, a practice that is common among competing vendors. These terms exist in English and in French; in the event of any discrepancy, the French version prevails.
2. Data controller
- Controller
- PANASSE
- Address
- 2 impasse des Perdrix, 33260 La Teste-de-Buch, France
- Contact
- legal@cookedapp.io
3. Data processed and legal bases
- Email address
- Needed to create your account, send you a sign-in link and deliver your license key. Legal basis: performance of the contract.
- License key and activation date
- Needed so you can find your license and so activations can be counted. Legal basis: performance of the contract.
- Technical activation identifiers
- One non-reversible identifier per activated Mac, so activations can be counted and released. No serial number or machine name is kept in clear. Legal basis: legitimate interest in preventing license abuse.
- Billing data
- Purchase history and invoices, kept to meet our accounting and tax obligations. Legal basis: legal obligation.
- Release-day list
- If you ask to be told when Cooked is downloadable, your email address alone is stored, and only for that. It is deleted when you leave the list — one click, from the link in the message, with nothing to sign in to. Legal basis: your consent, given by submitting the form.
- Server technical logs
- IP address and request timestamps, kept briefly to keep the service secure. Legal basis: legitimate interest in security.
- Audience measurement
- Page addresses, referring site, browser family and a country derived from your IP address — which is discarded, not stored. No cookie, no visitor identifier. Legal basis: legitimate interest in knowing whether these pages are read. See the cookies page.
We process no sensitive data and carry out no profiling or automated decision-making producing legal effects concerning you.
4. Payment data
Payments are handled by Creem’s registered name and address, copied from its own terms. We never have access to your full card details. That provider acts as controller or as processor depending on the nature of the operation, and its own privacy policy applies to the transaction.
5. Recipients and processors
Your data is never sold, rented or traded. It is disclosed only to the providers strictly necessary to run the service, who are contractually bound by confidentiality and security obligations.
- Site and database hosting: HOSTINGER Global S.à r.l confirm on the Hostinger invoice, whose servers used for this site are located in Chosen datacentre region.
- Payment processing and invoicing: Creem’s registered name and address, copied from its own terms.
- Transactional email delivery and the release-day list: Resend (Plus Five Five, Inc.), acting as our processor.
- Audience measurement: Umami Software, Inc., on its European region — the measurements are stored in the European Union.
Our host is a European company and your account data is stored in the European Union. Audience measurement runs on its provider’s European region, so those measurements stay in the Union too. Our email sending provider, however, is a United States company: the processing it carries out on our behalf involves a transfer outside the Union, framed by the European Commission’s standard contractual clauses.
6. Retention periods
- Account and license: for the lifetime of the account, then deleted on request.
- Dormant account: deleted after an extended period of inactivity, preceded by a warning email.
- Invoices and accounting records: the statutory retention period applicable in accounting and tax matters.
- Release-day list: until the message goes out, or until you leave the list — whichever comes first.
- Technical logs: a few days to a few weeks at most.
7. Your rights
You have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to withdraw your consent where processing is based on it.
To exercise these rights, write to legal@cookedapp.io. We answer within one month. You may also lodge a complaint with the French data protection authority (CNIL), or with the supervisory authority of your own country of residence in the European Union.
Deleting your account does not invalidate your license: the software keeps working on the Macs already activated.
8. Security
Exchanges with this site are encrypted in transit. Authentication relies on a single-use link sent by email: we store no passwords, which removes the risk associated with their compromise.