metal-sole policies
Privacy Policy
The short version: what our apps read stays on your Mac, and there are no analytics. We hear from you only when an app checks for updates, when you buy something or ask for your key again, and when you write to us.
What the apps read, and keep on your Mac
Agent Runway reads:
- your plan's usage and limits, from Anthropic and OpenAI, using the sign-in Claude Code and Codex already keep on your Mac, and those tools' command-line apps;
- the session logs those tools keep on your Mac, to count tokens;
- the public status pages for Claude Code and Codex (status.claude.com and status.openai.com), to spot outages.
Those requests go straight to Anthropic, OpenAI and the status pages, never through us. Its readings and history stay on your Mac, in ~/Library/Application Support/AgentRunway. None of it is sent to us: your usage numbers never leave your Mac. There are no analytics, no account and no identifiers. Your licence key is checked on your Mac too; the app never calls us to check it.
What reaches us
- Update checks. About once a day, each app asks updates.metal-sole.com whether there's a new version. Like any download, that shows our server the app's version and your IP address. We don't keep a record of individual checks.
- Purchases, through Paddle. Paddle runs checkout and collects what it needs to take your payment, such as your name, email address, payment details and country, under its own privacy policy. Paddle gives us your email address, its customer ID for you and what you bought, so we can make your key and email it to you. We never see your card details.
- Key recovery. If you ask for your keys again, we use the address you enter to look them up and email them to you. Cloudflare Turnstile checks that you're a person. To stop abuse, we keep scrambled versions (keyed hashes) of that address and your IP address for about a day, never the plain text.
- Email. If you write to support@metal-sole.com, we get your message and your address, and use them to reply. We get only what you send, and only when you send it.
So we keep your email address only if you've bought something (or we've given you a key), or you've written to us, and we use it only for your purchase and to send your key again. We never sell your information, use it for advertising, or add you to a mailing list.
This website
store.metal-sole.com has no analytics, no tracking cookies and no ads. Paddle's checkout loads only when you choose to buy, and we block the optional customer-tracking script Paddle offers sellers. Product screenshots are loaded from each app's own website.
Who processes data for us
- Paddle, our merchant of record: checkout, payments, tax, receipts and refunds. Paddle's privacy policy.
- Cloudflare: hosts this store and its database, sends key emails (Email Service), forwards mail sent to support@metal-sole.com (Email Routing), checks key-recovery requests (Turnstile), and serves app downloads and updates. Cloudflare's privacy policy.
- Vercel: hosts app websites, such as runway.metal-sole.com, for now. Like any web host, it sees your IP address when you visit one, or when a page here loads a screenshot from one. Vercel's privacy policy.
How long we keep things
- Licence records (your email address, Paddle's customer ID for you, the order reference, the key, its dates, and whether it was refunded): for as long as we sell and support the app, so we can send your key again whenever you need it. Ask and we'll delete yours, though we won't be able to resend the key afterwards.
- Key-recovery limits: about a day, scrambled.
- The thanks page shows your key for 24 hours after you buy. After that, it's in your email.
- Server logs: Cloudflare keeps short-lived request logs, for up to 7 days, for troubleshooting.
- Email you send us: for as long as we need it to help you.
- Paddle keeps its own record of your purchase, as tax law requires, under its policy.
Your choices
You can ask what we hold about you, and ask us to correct or delete it, by writing to support@metal-sole.com. For payment records, contact Paddle at paddle.net.
Who's responsible
Matt Maher, trading as metal-sole, in California, United States. Contact: support@metal-sole.com. We're based in the United States, so what we hold is processed there, and our processors may handle it in other countries too.
Changes
We'll update this page, and its effective date, before an app starts sending anything new.