Privacy Policy
1. What we collect
When you activate a license, Mole sends the license key, a short device label (derived from your Mac's hostname and a hashed hardware fingerprint), and nothing else. These are sent to Dodo Payments over HTTPS for activation and validation. When the license card lists the devices a license is on, Mole sends the key to https://mole.fit/api/license/devices, which reads that list from Dodo Payments and keeps only a SHA-256 hash of the key paired with its license ID in its database.
2. What we do not collect
Mole does not collect, transmit, or upload file contents, file names, browsing history, documents, passwords, or any data scanned during cleaning. All scanning and cleaning happen locally on your device. Mole keeps a local operation log at ~/Library/Logs/mole/operations.log on your Mac for your reference; this log is not uploaded automatically. The Mac app is distributed as a signed macOS app from mole.fit, and app updates are fetched over HTTPS from https://mole.fit/appcast.xml via Sparkle.
3. Third-party services
Dodo Payments is the merchant of record for Mole. It handles checkout, billing, license key delivery, refunds, and invoices. During checkout, Dodo collects your name, email, and billing address under its own privacy policy. Mole's own signed updates are fetched from https://mole.fit/appcast.xml over HTTPS via Sparkle; app update checks and installs may contact the App Store, Homebrew, or each app's Sparkle feed. In Mac app versions that offer public IP lookup, opening Network detail requests https://mole.fit/api/ip to show the current public IP; this service may query ipwho.is for approximate location and ISP. The website uses Google Analytics to measure aggregate visits; Google processes that website analytics data under its own privacy policy. The Mac app does not include Google Analytics.
4. Data storage
The license key is stored in the macOS Keychain on your device. Mole also keeps a copy of customer, license, payment, and refund records from Dodo Payments on Cloudflare for purchase support and backup recovery. These records include customer names and email addresses, but not files or scan results from your Mac.
5. Mole for Windows
The Windows app follows the same rules. Activation sends Dodo Payments the license key and a device label made from your PC's name and a hash of Windows' machine ID. The key is stored on your PC, encrypted for your Windows account. Settings and Mole's own logs stay in %LOCALAPPDATA%\Mole. Mole's updates are fetched over HTTPS from https://cdn.tw93.fun/mole/windows, and checking for app updates runs through winget, which contacts its configured sources. The Network detail requests https://mole.fit/api/ip, as on the Mac. The device list in the license card asks https://mole.fit/api/license/devices with the key, which reads that list from Dodo Payments.
6. Your rights
You can deactivate the license at any time from within the app. You may also request access to, correction of, or deletion of any personal data we hold by emailing hi@mole.fit. We will respond within 30 days. If you are in the EU/EEA, you have additional rights under the GDPR, including data portability and the right to lodge a complaint with your local data protection authority.
7. Contact
For privacy questions, contact hi@mole.fit.