Preparing the latest catalog view.
Effective 2026-10-23
JustMacApps is operated by Harsha Palegar, based in Kerala, India, at https://justmacapps.com. It provides a Mac app directory and maker workspace. This policy explains how the service handles personal information. Contact support@justmacapps.com with a privacy question or request.
When you create an account, we receive your email address, account identifier, sign-in method, and available name and avatar. We also store successful sign-in records, notification choices, and information you enter in your maker profile. Listing submissions, ownership evidence, revisions, media uploads, launch applications, support requests, and account-deletion requests are stored to operate the corresponding workflows.
Community features store comments, replies, votes, reports, moderation decisions, and the activity needed to calculate streaks and rewards. A public maker profile is optional. Only the approved public projection of fields you choose to publish appears on your profile. Private account information, email addresses, payment records, and sign-in history are not included in that projection. Comments from an unpublished profile use an unlinked Member label. Public profile information and published contributions can be viewed or copied by other people.
Google sign-in requests basic identity, email, and profile permissions. GitHub sign-in requests basic identity and email information. We use that information to authenticate you, maintain your account, and support an account connection you explicitly request. We do not request access to Gmail, Google Drive, or GitHub repositories. Provider identity data is handled through Supabase authentication and is not used for personalised advertising or sold to advertisers.
Email sign-in uses a time-limited link sent to the address you provide. Keep sign-in and subscription-management links private. You can manage connected providers in Settings, subject to keeping a working sign-in method. You may also revoke the application's permission through the provider's own account controls.
The service uses session and authentication cookies to keep you signed in and protect authentication requests. Infrastructure providers receive technical information such as IP addresses, request times, browser information, and requested URLs when serving or securing the website.
App and advertising reporting records qualified listing views, outbound website clicks, sponsor impressions, and sponsor clicks. The application derives a daily keyed visitor identifier from the connection IP address to limit duplicate events and filter abuse; the app analytics event record does not store the original IP address. These identifiers are pseudonymous, not a guarantee of anonymity. Makers receive reporting for apps they manage, rather than another member's private account details. Website clicks do not establish downloads or purchases. Limited website traffic reporting uses daily keyed identifiers and path-only events, excludes administrator visits and private workspace pages, and respects Do Not Track and Global Privacy Control. Daily visitor totals are estimates rather than unique people across multiple days. When detailed analytics is enabled, you can accept or reject it through Analytics preferences in the footer. After acceptance, first-party visitor and session cookies connect sanitized page views, named clicks, visible-tab engagement, approximate location, browser/device information, and tagged campaigns or referrals for up to 90 days. Authenticated activity and verified purchases may be linked to that consented visitor to measure conversion and source attribution. Maker pages use sanitized route templates; form contents, tokens, raw IP addresses and arbitrary URL queries are excluded. Detailed events and identity links expire after 90 days; older reports retain anonymous daily totals, and financial records follow their separate operational retention. Rejecting or withdrawing consent stops detailed collection and future identity linking, clears analytics identifiers, and unlinks existing attribution. Necessary preference cookies remember this choice. You can export linked analytics through your account data export and request account deletion through support. Redacted error references support reliability; error records do not contain passwords, tokens, raw error messages or URL queries. Separate PostHog product analytics is not enabled in the current production configuration.
Our configured email provider, Resend during migration and Amazon Web Services SES after cutover, delivers sign-in and service emails. Optional account notifications are controlled separately in Settings. Essential account, security, and transaction communications may still be sent when needed to operate your account or respond to a request.
The Just Mac Apps newsletter is delivered online by email through our configured email provider (Resend or Amazon Web Services SES). It can contain disclosed sponsorships and editorial app mentions. Subscription does not involve physical delivery. The newsletter is included by default for new accounts, with a visible signup choice. You can turn it off during signup or unsubscribe later. Activation uses your verified account email without a separate newsletter confirmation. Optional email notifications also start on for new accounts and can be changed in Settings. Returning sign-ins preserve saved choices and do not resubscribe you. Anonymous newsletter signups require email confirmation. Existing unsubscribes and provider suppressions are respected. JustMacApps manages subscriptions and uses its configured provider (Resend or Amazon Web Services SES) to deliver newsletter messages to your email address. The service stores subscriber status, consent/confirmation information, and signed status events to keep your account's newsletter state accurate. You can unsubscribe through an email link or request secure access at https://justmacapps.com/newsletter/manage. Unsubscribing from the newsletter does not close your account.
When purchasing is available, Dodo Payments hosts checkout and processes payment information under its own privacy notice. Just Mac Apps stores order and provider references, purchase amount and currency, payment/refund status, reservations, and the benefits attached to the purchase. Do not send card numbers, bank details, passwords, or API keys to support. Purchases are available only when the corresponding offer is enabled and shown as available.
Cloudflare hosts and secures the application and runs scheduled operations. Supabase provides the database, authentication, and file storage. Our configured email provider, Resend during migration and Amazon Web Services SES after cutover, delivers transactional email. Buttondown manages newsletter subscriptions and delivery. Porkbun forwards messages sent to our contact addresses. Google and GitHub handle the sign-in methods you choose. Dodo Payments handles checkout when enabled. Providers process information for these functions and may operate in countries outside your own; we do not promise that data stays in one country.
Access within the service is restricted by account ownership and administrator permissions. We may disclose information when necessary to handle a request you make, protect the service and its users, investigate abuse, or meet a binding legal requirement. We do not sell personal information or give advertisers private account or provider identity records.
Account and workflow records are kept while needed to provide the service. Raw app and website analytics events are subject to the existing 90-day cleanup process; aggregate reporting can be retained longer. Security, moderation, ownership, order, refund, and audit records may be retained when needed to resolve disputes, prevent abuse, preserve purchased benefits, or meet legal obligations. Provider backups and logs follow the relevant provider's retention arrangements.
You can edit your profile, withdraw public-profile publication, change optional notification preferences, unsubscribe from the newsletter, and download your account data in Settings. You can request account deletion there or contact support@justmacapps.com to request access, correction, or deletion. Support reviews app ownership, transfers, and records that must be retained before removal; submitting a deletion request does not instantly delete the account. We may need to verify that a request comes from the account holder. Rights and response requirements under applicable law remain available.
Maker accounts, community participation, and purchasing are intended for adults aged 18 or over. The service is not directed at children. Contact support if you believe a child has provided personal information.
We will update this policy when practices change and show its effective date. If a new use requires your consent, we will request that consent before using information in that way.
Contact support about this policy.