Privacy

Normal file inspection is local. Files, field names, values, profiles, edits, prompts, model replies, and results are not uploaded or persisted remotely by the licensing system.

Licensing is a narrow outbound path to splitline.se-ai.live; purchase happens on Stripe’s hosted Checkout. The native app sends opaque checkout/device identifiers and credentials, and sends the checkout email plus one-time code only when you explicitly request recovery. The private entitlement service stores Stripe transaction references, purchase/entitlement state, opaque device IDs, and hashes of credentials and recovery email/IP values in a dedicated TLS-protected PostgreSQL database. Raw checkout email is used to send the requested code and is not stored by Splitline. Stripe processes checkout, tax, payment, receipts, and its own transaction records under its policies.

The pre-launch waitlist form on this website is the one place Splitline keeps a readable email address. Pressing Join the waitlist sends the address you typed to the same splitline.se-ai.live service, which stores it alongside a keyed hash of the address and a keyed hash of the submitting IP; the hashes exist to recognize a repeat signup and to cap submissions per network. If you filled in the optional I wish I could… field, that text is stored too, filed under the keyed hash of your address rather than beside the address itself. The waitlist record adds no name, company, analytics identifier, cookie, or tracking pixel to that data. The address is used once, to tell you Splitline has launched, and it is deleted after that message is sent; anything you asked for outlives it, still holding only the hash.

The website host currently keeps standard nginx access logs for operations. These can include an IP address, time, requested path and query string, response status and size, referring URL, and browser user agent. They do not contain the contents of files inspected in the app. The planned bounded analytics system described below is not active, and no GoAccess report is currently generated. This website uses no analytics cookie, identifier, tracking pixel, or browser analytics script.

Before website analytics begins, every participating se-ai.live site will publish its notice and the existing log policy will be replaced. The planned shared log will record ordinary request metadata across the apex and its subdomains: IP address, time, requested hostname, method, path without its query string, response status and size, referring origin without its path or query string, and browser user agent. Only GET and HEAD page requests will enter it. API and service prefixes (including /api, /v1, /storage, and health checks) and every other method will be excluded, including waitlist, license, and Project Inside API submissions. Project Inside invite URLs will be recorded only as /invite/:token, never with the invite token. Raw logs will be retained for no more than 30 days. Once a day, GoAccess will read those logs on the same server to build a private report with a per-site breakdown; report IPs will be anonymized and the visitor Hosts panel omitted. The report will not be published or sent to an analytics provider. This notice will be updated when the change is verified and active.

The native license record stays in a dedicated macOS Keychain entry. The app config directory contains only a non-secret consistency sentinel. Checkout claim tokens, recovery tokens, device credentials, and signed leases never enter the WebView, browser storage, diagnostics, or logs.

The optional Analyze feature is a separate outbound path with its own consent and per-request disclosure.

The packaged macOS app also checks one fixed public GitHub Releases endpoint at launch for a newer stable version. That request carries no app-specific data beyond the compiled version in its User-Agent and no file, field, profile, edit, prompt, result, license, or device identifier. Like any web request, it exposes ordinary connection metadata such as an IP address to GitHub under GitHub’s policies. A download starts only after you press Download update; installation remains manual.