Privacy Policy

Last updated: October 5, 2026

This Privacy Policy describes how Potential, Inc. ("we", "us", "our") handles information in connection with SuperMirror. We believe in minimal data collection and maximum transparency.

1. Information We Collect

License keys. When you purchase SuperMirror, we generate a license key tied to the email address you provide at checkout. We use the key to validate your license and connect paid activation reports to the purchase.

Payment information. Payments are processed by Stripe. We do not store your credit card number or billing address. We retain checkout identifiers, checkout source, amounts, currency, tax, refunds, fees, and chargebacks for revenue accounting. Stripe handles all payment data under their own privacy policy.

Paid license activation. Updated Mac and Linux apps send the signed license key, host platform, and a report identifier to our license service on Cloudflare. The app saves the report locally before sending and retries failed requests. License validation still works offline. We use purchase and activation evidence to attribute Linux revenue and calculate our Linux development partner’s 50% share after taxes, fees, refunds, and chargebacks. This reporting does not include screen content or keystrokes.

Optional setup email. Downloads do not require an email address. If you ask for setup steps, we store your email address, platform, request, and delivery status with Cloudflare. We use a keyed hash of your client address to limit repeated requests. Resend sends the setup email. This does not subscribe you to marketing emails. The form keeps drafts, requests, and responses in this browser for safe retries. You can clear these copies in your browser settings and request deletion of server records at [email protected]. Older download requests remain subject to the same deletion process.

Windows release email. If you ask to hear when SuperMirror for Windows ships, we store your email address, a request ID, the request time, and a keyed hash of your client address with Cloudflare. We use the hash to limit repeated requests. We use your address only to send one email when the Windows version is available. This does not subscribe you to marketing emails. The form keeps drafts, requests, and responses in this browser for safe retries. You can clear these copies in your browser settings and request deletion of server records at [email protected].

Support communications. If you contact us at [email protected], we retain your email address and message content to provide support.

Website analytics and advertising. Website trackers stay off until you select Accept. Some pages use the following services:

Google, Meta, and Cloudflare receive browser requests when their website trackers run. These requests expose your IP address and browser information. We do not send these website analytics requests before you accept. Selecting Decline keeps all four website trackers off. Downloads and purchases do not require analytics consent.

Your choice. We save your choice in this browser's local storage under sm_consent_v1. It applies across this site and stays until you change it or clear browser storage. If we cannot save acceptance, we do not start trackers. After a withdrawal, this browser also keeps the withdrawn Google Analytics client ID under sm_consent_withdrawals_v1 until our server confirms that it saved the withdrawal.

Withdraw consent. Use Privacy choices in the footer of any page with analytics, including this page. Select Decline. We turn off Google Analytics and Meta Pixel through their own controls. We block tracker requests that the open page sends with the browser’s beacon, fetch, or XMLHttpRequest functions, including requests sent as the page closes. We remove accessible Google and Meta tracking cookies and clear our analytics session storage. The page then reloads without trackers. Other open pages with analytics also apply the change. If the page has a Google Analytics client ID, it sends that ID to our server. We store the ID and the withdrawal time with Cloudflare and keep this record, so our server never again sends purchase or app events for that ID to Google Analytics. Withdrawal does not delete data already sent. You can also clear this site's cookies and storage in your browser settings.

Purchase reporting. After you select Accept, Buy links on this site pass your Google Analytics client ID to Stripe as the checkout reference. When that checkout completes, our server sends a purchase event to Google Analytics, unless you withdrew consent before then. The event contains that client ID, the Stripe checkout ID, the product name, the amount, and the currency. The thank-you page removes the Stripe checkout ID from its address before any tracker loads, so page views do not carry it. Without that reference, our server sends no purchase event to Google Analytics. Payment and license delivery do not use the reference.

App events. Our app event endpoint forwards an event to Google Analytics only when the request carries an analytics consent reference with a client ID. It forwards nothing for other requests.

Email delivery. We use Resend to deliver transactional emails (setup steps, license key delivery, purchase confirmations). Resend processes your email address solely for delivery purposes.

2. Information We Do Not Collect

3. How We Use Information

We use information for:

4. Data Retention

We retain your email address and license key for as long as your license is active. Support communications are retained for up to 2 years. You may request deletion of your data at any time by contacting us.

5. Data Security

We take reasonable measures to protect your information. All data in transit is encrypted via TLS. Payment processing is handled entirely by Stripe, which is PCI DSS compliant.

6. Third-Party Services

SuperMirror integrates with the following third-party services, each governed by their own privacy policies:

7. Children's Privacy

SuperMirror is not directed at children under 13. We do not knowingly collect personal information from children.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised "Last updated" date. Continued use of SuperMirror after changes constitutes acceptance of the revised policy.

9. Contact

If you have questions about this Privacy Policy, contact us at [email protected].

Potential, Inc.