Privacy policy

Updated 6 October 2026

Uncork is one person's private project, not a company. Without an account, the free core sends us very little — an update check with the Mac fingerprint. For Uncork Pro it collects exactly as much as it takes to make Pro work, count the purchase, and keep one key from travelling across ten computers.

The free core and Pro

The Uncork free core needs no account: it contacts our server only to check for updates and sends the app version and the Mac fingerprint — from them the server gives this Mac its build and notes that the app checked in (at most once a day per Mac). From the same fingerprint the server decides whether the Mac sees a new version before everyone else: new versions reach people with Pro first. Fixes (1.0.1, 1.0.2 and on) the app downloads from our server and installs by itself when you quit — that is an ordinary file request, and nothing beyond the update check is sent; you can turn it off in settings: “Install fixes automatically”. The email, the trial, payments, the driver key and the Pro module in the list below appear only if you start the Uncork Pro trial or sign in to an account to buy it. After your first game without Pro, Uncork offers the trial once: the Mac fingerprint goes to our server only after you press “Try Pro”, and “Not now” sends nothing.

What we keep

• Email and name — you can sign in with Google or with a code sent to your email, and either way we end up with the address. The name comes from Google only. We never see the password for that account: you sign in with Google, and only a signed answer reaches us.
• A fingerprint of your computer — a short string derived from your Mac's identifiers. Access is bound to one machine by it, and there is one trial per Mac. The machine or its serial number can practically not be reconstructed from it.
• A Pro trial without an account — if you started the Pro trial in the app: the Mac fingerprint, when the trial started and when it ends, the app version, and when the Mac last contacted the service. There is no email or name here: there is no account. If you sign in to an account on this Mac, the rest of the trial moves to it, and the trial record stays as a mark that this Mac has had its trial.
• Issuing the Pro module — Pro features arrive as a separate module, and only for people who have Pro. When the app downloads it, the access token, the Mac fingerprint and the app version go to our server. The server writes a signed mark into the module's libraries — the account number (a trial without an account has none), the Mac fingerprint, the licence number and the time of issue — and notes the issue with the module version, at most once a day per Mac. The mark stays in the module's files on your Mac: it is how the module works only on that Mac, and how a copy found elsewhere shows where it came from.
• The nickname and name you typed when activating.
• The app version, so we offer the right update and check whether Uncork Pro covers this version.
• Payment records: channel (Telegram Stars, crypto via OxaPay or TON), amount, the payment system's own charge id, and the date. Card details never reach us — we do not accept them at all.
• Pro time credits: how many days and what for — the trial, an invite, the school week, days from us or an earlier monthly or yearly payment — and when, plus days taken back after a refund. They give the date until which you have Pro, if you have not bought it.
• Steps you took — marks that something happened, with no detail: account created, app downloaded, a trial was started on the Mac, Mac paired, signing in was started in the app, the app checked in (at most once a day per Mac), a driver key was issued (it is issued for Pro features, when the app is opened and when a game is launched; it counts as one mark at most once a day per Mac), the Pro module was issued (at most once a day per Mac), a payment was started (by which method: Stars or OxaPay), a payment went through, the "it won't open" hint was opened. Some marks are stored with your account, others with the Mac fingerprint; the licence links the two. They show where people get stuck, and referral days are counted from them. Which game started, and how long you played, is not recorded.
• Your school or university domain — only if you signed in with a student address and got a week of Pro for it. We keep the domain itself and which sign-in confirmed it. We never ask for, or keep, any documents.
• A link tag — if you created an account on the site after arriving through a link carrying a tag such as ?src=, the tag stays on the account, so we can see where people hear about us. It tags the link, not you.
• Your answer to “How did you hear about us?” — an optional question in the profile when you pay. If you pick an answer (ChatGPT or another AI, Reddit, YouTube, a friend, other), it is kept on the account as one word; “Rather not say” or skipping it records nothing.
• A download count — when the app is downloaded through the Download link on the site, the service adds one to that day's count for the link tag (?src=, if there was one). The record holds only the date, the tag and the number: no IP address, no fingerprint, no account, no cookie, so it cannot be linked to a person. Only a browser following the link counts, and only up to a limited number of times from one address in a few minutes; for that, the address is held only in the service's memory, as a hash: it is never written to disk and never goes into the count.
• Server logs: which address was requested, when, from which IP. They exist to catch code guessing; the web server log is deleted after 14 days. The service also keeps its own log (the event, the time, the account number, the nickname, the first characters of the Mac fingerprint, the email address in masked form, payment identifiers and, for a TON transfer without a comment, a fragment of the TON network message); we have not limited how long it is kept yet.

What we do not keep

• Your Steam password or Steam Guard code. We never ask for them and never accept them. If anyone asks for them in Uncork's name, that is not us.
• Which games you play and for how long. Your library is read on your Mac and never leaves it. All that remains among the steps above is a mark that a driver key was issued — no title, no duration, at most once a day; it also appears when you merely open the app, so it cannot tell whether you played.
• Visits to the pages of this site. We do not count them, by our own means or anyone else's: the service does not accept visit marks, and a test guards that. Only downloads of the app are counted — as described above, with no addresses, fingerprints or cookies.
• Game files, saves, screenshots, anything else on your disk.

Why

Email so you can reach your own profile and see your Pro, and so we can write to you once if you created an account but never got to your first game, to offer help: no advertising, and you do not have to reply. The fingerprint so one bought Pro is not handed round a classroom, there is one trial per Mac, and the update check gives the Mac its build. The mark in the Pro module so the module works only on a Mac that has Pro, and a leaked copy can be seen. Payments so Pro can be switched on and referral days credited, and so we can see how many people pay again: that report holds only numbers per month, no names or addresses. Logs so the service cannot be knocked over by guessing codes. The download count so we can see which links bring people to us without watching the people themselves.

Who else sees it

• Google — if you sign in with it (you can sign in only with Google or with a code sent to your email). It sees the sign-in itself; that is its normal process, under its own policy.
• The payment channel — Telegram, OxaPay or the TON network, at the moment you pay. OxaPay (crypto payments) gets from us the amount in euros, the description “Uncork Pro” and an order number containing your account number — no email or name; what you enter on the OxaPay payment page is handled by OxaPay under its own policy.
• Nobody else from us. Downloads the app makes directly from other people's servers (Steam, GitHub, Microsoft, game stores, Apple) bypass us: those servers see your IP address, and Steam also gets the key and SteamID if you added one yourself; the list is on the page "What Uncork sends". We do not sell or share data. There are no ads and no third-party analytics. Our own statistics come only from what is described above — the download count, summaries of the usage steps, link tags and “How did you hear about us?” answers, and the renewal report — and only we see them. We serve the page fonts ourselves, with no request to Google.

Cookies

Three, all functional. The first keeps you signed in. The second appears only if you arrived through an invite link: it holds the inviter's code, lives for thirty days and is erased the moment you create an account, so the invitation is credited to the person who invited you. The third appears only while you sign in with Google: it holds a random string that ties the return from Google to your browser, so that someone else's sign-in link cannot open someone else's profile for you; it lives for fifteen minutes and is erased once sign-in is done. No advertising or analytics cookies, and therefore no consent banner — there is nothing to consent to.

Where it lives

The server is rented from Aeza and physically stands in Frankfurt, Germany, so the data the service itself keeps does not leave the European Union; the third-party services listed above work under their own rules. The host has technical access to the disk — as any host does to any server; nobody else goes in there.

On what grounds

Email, the Mac fingerprint, the nickname and the payment records are performance of our contract with you: without them Pro does not work and the purchase cannot be counted. The update check with the Mac fingerprint in the free core is legitimate interest: giving the Mac the right build and seeing how many Macs check in. The record of a trial without an account is performance of a contract (the trial itself) and legitimate interest (one trial per Mac). Issuing the Pro module and the mark in it are performance of the contract (Pro itself) and legitimate interest (the module does not go to people without Pro). The usage steps and the server log are legitimate interest: seeing where things break, and stopping code guessing. A single email offering help to someone who never got to their first game is legitimate interest too. The download count is legitimate interest, and it holds no personal data. The renewal report is legitimate interest: understanding whether people pay again; it is built from the payment and time-credit records we already keep, and it holds only numbers. Advertising, profiling and selling data are not on the list, because they do not exist here.

Your rights

You can ask to see what is kept about you, correct it, take a copy, delete all of it, or object to the processing. It all happens by writing to hello@uncork.win — a person answers, not a form. If the answer does not satisfy you, people in the European Union have the right to complain to their national supervisory authority, and people in Switzerland to the federal data protection commissioner.

How long, and how to delete it

Account data: for as long as you have an account. A trial without an account and this Mac's marks without an account (the trial start, driver keys issued): two years after the Mac last contacted the service, then they are deleted on their own. The marks “the app checked in”, “signing in was started”, “the hint was opened” and “the Pro module was issued” are deleted after 400 days. The mark inside the Pro module lives only in the files on your Mac: delete the module's folder and it goes too. The download count holds no personal data and is kept as statistics.

Write to hello@uncork.win and we delete the account, the fingerprint and the profile. A trial without an account is deleted by the first 12 characters of the fingerprint from Uncork's settings (the “This computer” line). After such a deletion only a salted hash of the fingerprint remains — a record that this Mac has had its trial, from which the fingerprint itself cannot be recovered: without it, deleting would mean a new trial. Payment records are kept longer: they are what a disputed charge is settled with. Server logs are not part of that request: the web server log deletes itself after 14 days, and we have not limited how long the service's own log is kept yet — as stated above.

Children

The service is not intended for children. In the European Union a person takes control of their own data from the age of 16 — in some countries the threshold is lowered to 13. If you are younger, you may use Uncork — including starting a trial without an account — and create an account only with your parents’ consent.

Changes

If the text changes, the date at the top changes with it.

Contact

hello@uncork.win