Privacy

Privacy policy

Updated 3 October 2026

Which personal data we process, why, on which legal basis and for how long, under Regulation (EU) 2016/679 (GDPR) and Spain’s Organic Law 3/2018 (LOPDGDD). Altitude’s idea is simple: your projects and keywords stay on your Mac.

1. Data controller

Owner: Oriol Nadal Serra
Tax ID (NIF): 39403253K
Address: Quarter Ponent 11, 08460 Santa Maria de Palautordera (Barcelona), España
Email: [email protected]
Website: altituderank.com
Activity: Software development and sales: the Altitude app for macOS

We have no data protection officer because we are not required to appoint one. For any privacy question, write to [email protected] with “Privacy” in the subject.

2. What the app does not send

Altitude has no user account, no analytics and no telemetry. Your projects, keywords, rankings, notes and reports are stored on your Mac (and in your iCloud if you turn on sync, under Apple’s terms). They never pass through our servers, except the requests you make with the Altitude balance if you choose it instead of your own DataforSEO account (section 3).

DataforSEO credentials: stored in the macOS Keychain and sent only to api.dataforseo.com. Your relationship with DataforSEO is direct and governed by its terms. The Altitude balance needs none of your credentials: the app uses its own access code, also kept in the Keychain.
Google Search Console: if you connect it, the app asks Google for read-only access (webmasters.readonly). Sign-in happens on Google’s own page and the token is kept in the Keychain. The data goes from Google to your Mac and stays there: we do not receive it, do not share it and do not use it for advertising or to train models. You can disconnect in Settings › Search Console or at myaccount.google.com/permissions. Altitude’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3. What we process and why

Buying a license: Email, name, country, payment id, amount and the issued key. To issue and send the key, handle refunds and complaints, and meet tax obligations. Card details are handled by Dodo Payments; we never see them.
License activation: The key, an anonymous identifier of the Mac (a hash of the hardware identifier, never the identifier itself), the computer name and the app and macOS versions. To bind the license to one Mac and check once a day that it is still active.
Recovering a license: The email you type, to resend the keys linked to it.
Withdrawal: If you use the online withdrawal form: your name, your email, the key or payment number if you give them, the reason if you give one, and the date and time of the request. To process the withdrawal and the refund, send you the receipt and be able to show that you asked in time. Kept with the purchase data.
Creator program (optional): If you send us content for the program: your name if you give it, your email, the license, the link to the content, the platform, the views you state, the publishing date and your note, with what we decide and the refund. If we approve it, your creator code and the sales that come through your link and their commission (without telling you who bought). To handle the refund and pay your commissions. Kept with the purchase data.
Your account (altituderank.com/account): Your email and a single-use six-digit code, stored hashed and expiring after 15 minutes; or, if you sign in with Apple, the identifier Apple gives Altitude for you and the email Apple shares (possibly a “Hide My Email” address). We never receive your Apple password. Once you sign in, a 30-day session; from the app, a single-use link that expires after two minutes. We note what you do from your account (releasing a Mac, asking for the key) so we can help if something goes wrong.
Security: Sign-in attempts to your account and to the admin panel, with the IP address and time, to stop attacks. Attempts are deleted after two days; the IP address in the activity log, after 90 days.
Altitude balance (optional): Only if you use it instead of your own DataforSEO account: a random identifier for your balance, the name of each linked Mac, the email and customer id Dodo Payments gives us when you pay, the movements (top-ups and usage, with the type of request and its cost) and, if you turn on auto-recharge, the reference of the recurring payment at Dodo Payments (never your card details). The app’s requests (keywords, domains, locations) pass through our server to DataforSEO and the answer goes back to your Mac: we keep neither their content nor the results, only each task’s identifier for seven days, so it is delivered to you alone. To provide the service and charge for it.
Support: Whatever you tell us by email, to answer you.
Updates: Once a day the app reads a public list of versions. No personal data is sent. We count how many of these checks arrive each day and from which version of the app (the system includes it in the request), without identifying anyone; as with any connection, the server sees the IP address, which we do not store.
Visits to this site: We count the pages viewed each day: the page, which site or campaign the visit comes from, the language and whether it is a computer, a phone or a tablet. We use no cookies and keep no IP address or identifier, so we cannot tell who you are or follow you between visits. If your browser asks not to be tracked (Do Not Track or Global Privacy Control), nothing is counted.
Downloads: When Altitude is downloaded, which version and from where (the site, an email or the app itself), to count downloads without identifying anyone. The IP address only serves to stop abuse of the download link and is deleted after two days.
Tips and news by email (optional): Only if you sign up and confirm the link we send you: your email, language, where you signed up (the site or the app), the exact text you agreed to and its version, the browser type and the dates of the request, the confirmation and, if it happens, the unsubscribe. To send you usage tips, news and offers about Altitude, and to be able to show your consent. You leave with the link in every email.
Cookie consent: Your choice in the cookie notice (which categories you accept or reject), the policy version, the date, the language and the browser type, together with a random id kept in your altitude_consent cookie. No IP address. To be able to show that you gave your consent (art. 7(1) GDPR). Kept for three years.
Google analytics and advertising: Only if you accept those categories in the cookie notice and they are switched on for the site: Google Analytics and Google Ads (Google Ireland Limited) receive data about your visit to this site to measure visits and campaigns. Details in the Cookie policy.

4. Legal basis

Performance of a contract (art. 6(1)(b) GDPR): the purchase, delivery of the key, activation, recovery and support of your license, and the Altitude balance if you use it.
Legal obligation (art. 6(1)(c) GDPR): keeping the billing data required by tax and commercial law, and handling and documenting withdrawal requests.
Legitimate interest (art. 6(1)(f) GDPR): preventing fraudulent use of keys (one license per Mac) and keeping the service secure.
Consent (art. 6(1)(a) GDPR and art. 22.2 LSSI-CE): analytics and advertising cookies, when the site uses them. You can withdraw it at any time from “Cookie preferences” at the foot of every page, without affecting what was processed before.
Consent (art. 6(1)(a) GDPR and art. 21 LSSI-CE): the tips, news and offers emails, with double opt-in. You can withdraw it at any time with the unsubscribe link in every email or by writing to us.

5. How long we keep it

License data, for as long as the license exists. Purchase data, for the periods set by tax law (4 years) and commercial law (6 years). Altitude balance movements, while you have a balance or use it, and then for the same tax periods. Support emails, while needed to help you and then blocked for the limitation periods of possible liabilities.

The email subscription, for as long as you stay subscribed. A request you do not confirm is deleted after 30 days. If you unsubscribe, we keep your address marked as unsubscribed for three years, only to honour it and be able to show we did.

6. Who else processes it

We do not sell or hand over data to third parties. Only the providers essential to the service process it:

Apple: only if you sign in with Apple, it confirms who you are and shares your identifier and email with us, as an independent controller under its own privacy policy.
Dodo Payments: charges for the license as merchant of record, issues the invoice and applies taxes. It processes payment data as an independent controller under its own privacy policy.
The email provider that delivers keys, codes, receipts and, if you sign up, the tips and news (Resend or the owner’s mail server), as a processor.
The hosting provider of the site and the license server, as a processor.
DataforSEO: only if you use the Altitude balance, it receives the app’s requests (keywords, domains, locations) from our server, without your name or email, to return the results. It acts as a processor.

Some of these providers may process data outside the European Economic Area, for example in the United States. When they do, they rely on GDPR safeguards: an adequacy decision such as the EU-U.S. Data Privacy Framework, or the European Commission’s standard contractual clauses.

7. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to [email protected] from the email you bought with, or by post to the address above. We will reply within one month.

If you think we have not handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es) or the data protection authority of your country.

8. Security and minors

Communication with the site and the license server is encrypted (HTTPS) and access to the data is restricted to the owner. Keys are cryptographically signed. The admin panel requires a username and password (stored with scrypt, never in clear text), supports two-step verification and locks access after several failed attempts.

Altitude is a professional tool and is not aimed at children under 14.

9. Changes

If we change this policy we will publish the new version with its date. If the change is significant and we have your email, we will let you know.