Privacy Policy

This page explains what data the Vox Stella website (voxstella.app) and the Vox Stella desktop app handle, and why. The separate iOS app has its own policy: see the Vox Stella Forensics privacy policy.

Website analytics (Google Analytics 4 and Microsoft Clarity)

Most pages on this site can load Google Analytics 4 (measurement ID G-2JSNV110NL) through Google’s gtag.js script. Google Analytics records information about your visit, such as the pages you view, the site that referred you, your device and browser type, and your approximate location, and it sets first-party cookies (such as _ga) to recognize returning visitors. We use these reports to understand which pages are useful. We do not use advertising cookies.

Together with Google Analytics, and under the same choice, the site can load Microsoft Clarity (project w6q5jym1vx). Clarity records how visitors use a page, such as clicks, scrolling and mouse movement, to produce heatmaps and session recordings, and it sets first-party cookies (such as _clck and _clsk). We use it to find confusing or broken parts of pages.

• If your device’s time zone places you in the European Economic Area, the United Kingdom or Switzerland (we treat every European time zone this way), or the time zone cannot be read, neither Google Analytics nor Microsoft Clarity is loaded unless you choose Accept analytics in the cookie banner. Your browser makes this check itself; no server looks up your location.
• Everywhere else, both load by default.
• You can change your choice at any time with the Cookie settings link at the bottom of each page. Choosing Decline stops both, withdraws Clarity consent and removes the Google Analytics and Clarity cookies set for this site. Your choice is stored in your browser’s local storage as vs_analytics_consent.
• Neither is loaded if your browser sends a Do Not Track signal.
• You can also block them with your browser’s privacy settings, a content blocker, or Google’s Analytics opt-out browser add-on.
• Google and Microsoft process this data under their own terms; see Google’s privacy policy and the Microsoft Privacy Statement.

Hosting and security (Cloudflare)

The site is served through Cloudflare. To deliver pages and protect the site from abuse, Cloudflare processes technical request data such as your IP address, browser user agent, and the address you requested, and it may set security cookies. The site’s own code does not store visitor request data.

The sky at the top of each page is coloured in your browser from your device’s time zone and clock; nothing about your location or time is sent anywhere.

Purchases (PayPal)

The pricing sections on the home and product pages load PayPal’s JavaScript SDK from paypal.com to display subscription buttons, and they link to PayPal checkout pages. You enter payment details with PayPal, not on this site, and PayPal may set its own cookies; see PayPal’s privacy statement on paypal.com. After a purchase or subscription, PayPal notifies Vox Stella’s licensing service of the payment or subscription status so that your license can be issued and kept in sync.

Email

The "Email Vox Stella" links open your own email app addressed to voxstella.official@gmail.com. If you write to us, we receive your email address and message through Google’s Gmail service and use them to reply and provide support.

Downloads and outside links

The Windows installer is downloaded from GitHub, and iOS app links open Apple’s App Store. Those services handle your request under their own privacy policies.

The desktop app

• Charts: the app runs locally; core features do not require uploading your charts.
• Licensing: when you activate, verify, refresh, or deactivate a license, the app sends your license key (or PayPal purchase or subscription ID) and a device identifier to Vox Stella’s licensing service, plus your email address if you choose to enter one. The device identifier is a hash derived from your machine and the app, not your name. The service stores these details to issue activations and enforce the device limit for each license.
• Updates: the app checks for and downloads updates over HTTPS.

Public data endpoints

The site’s feeds and read-only discovery endpoints (such as /rss.xml, /sitemap.xml, and /mcp) are served like ordinary pages. They do not ask for or store personal data.

Your choices and questions

You can browse the whole site with analytics blocked. To ask about the data we hold about you, such as support emails or license records, email voxstella.official@gmail.com.

Changes to this policy

We update this page when our practices change. The date at the top shows the latest revision.