Privacy Policy

Last updated October 5, 2026

Who we are

NightJar is made by NightJar App (“we”, “us”). We decide how the personal data described here is used. Questions or requests go to support@getnightjar.space.

What stays on your computer

The NightJar app runs a local server on 127.0.0.1, which is not reachable from other machines. Everything it works with stays on your computer and is never sent to us:

• your apps, project folders, commands and settings (~/.nightjar/config.json)
• process output, logs, environment variables and env files
• the list of ports and processes on your machine
• Siri shortcuts NightJar builds (~/.nightjar/shortcuts/)

What we collect, and why

When you buy NightJar Pro

Polar Software, Inc. is the merchant of record: it runs the checkout, takes payment, handles tax and sends your receipt and license key. Polar shares your name, email address, billing country and order details with us. We use them to deliver and support your license, handle refunds, and keep the records tax law requires. We never see your full card details.

After checkout, Polar redirects you to our payment-success page with a checkout ID. Our server sends that ID to Polar to verify the payment status, organization and NightJar Pro product before showing the Pro installers. We do not store the checkout ID.

When you activate, check or remove a license key

The app talks to Polar’s license API at api.polar.sh. It sends:

• your license key and our Polar organization ID
• your computer’s name (its hostname), as a label for the activation, so you can tell your machines apart when you move a key
• the activation ID, when re-checking or removing a key

The app re-checks your key at most once every 14 days. Polar replies with the key’s status, its expiry date if any, and the email it belongs to. The app saves that reply in ~/.nightjar/license.json, readable only by your user account. Removing the key in Settings deletes that file.

While the app is running

So we can see how many copies of NightJar are in use, the app checks in with this website when it starts, every 2 minutes while it runs, and when it quits. Each check-in sends a random install ID created on first run and kept in ~/.nightjar/install-id, the app version, your operating system (macOS, Windows or Linux), whether you are on Lite, a Pro trial or a Pro licence, how many apps you have configured and how many processes are running. It never sends app names, folders, commands, logs or your computer’s name. With an activated Pro licence, the check-in also carries your license key over HTTPS so our server can ask Polar which email the key belongs to. We store that email with the install ID, never the key. We store the latest check-in per install ID and which days it was used. To turn it off, add "anonymousUsage": false to the settings in ~/.nightjar/config.json.

When you download NightJar or the app updates itself

At launch and every hour, the app asks this website for the newest release of its edition (Lite or Pro). That request sends nothing else. When a Pro copy downloads an update, it sends its license key so our server can confirm with Polar that the key may download Pro. The key is not stored.

Each installer download, from this site or from the app, records the edition, platform, version, time and where it came from (the download page, your account, the payment-success page or an in-app update). If you are signed in, or a Pro key or checkout verified the download, we also record the email it belongs to.

When you create an account on this website

An account is optional and only lets you see the Pro keys bought with your email address, and which machines they are activated on. We run sign-in ourselves. Our database stores:

• your email address, and a one-way hash of your password if you sign up with one (never the password itself)
• if you continue with Google, your Google account ID and the email address Google shares
• when you signed up and confirmed your email address, and your active sign-in sessions
• hashed records of recent sign-in and email requests, deleted after a day, to stop password guessing and email flooding

To show your keys and let you download NightJar Pro, our server looks up your confirmed email address in Polar. Your keys are read live from Polar each time and are not copied into your account. Your browser keeps the sign-in session in a cookie that page scripts can’t read; it lasts 30 days, and signing out ends it on our server too. On the account page you can change your password, sign out everywhere, or delete your account, which removes it from our database at once.

When you email us

We keep your message and address so we can answer and follow up.

When you visit this website

The site has no ads, no third-party analytics and no third-party fonts or scripts. It counts page views and downloads per day. To show visits in the admin panel, it also gives each browser tab a random ID in session storage and records its entry page, current page, number of page views, first and last activity times, where the visit came from (the referring site’s name, or the campaign name in a utm_source link), your operating system family (such as macOS or Android), and the names of the parameters in the first page’s address (with values only for campaign tags such as utm_campaign or ref). A visible tab checks in every 30 seconds so we can estimate who is currently on the site. These records are anonymous browser sessions, not identified people; we do not store an IP address, full browser details, account ID, full referring address or any other parameter value with them. When the payment-success page or a Pro download link verifies a checkout, we log the result and time under a one-way hash of the checkout ID, never the ID itself. The visit tracker sets no cookie. The site's only cookies are the sign-in cookie, set when you sign in, and a ten-minute one while a Google sign-in is in progress. Resend, Inc. sends our confirmation, password-reset and security-notice emails. The payment-success page asks our server to verify the checkout with Polar. Our hosting provider, Railway, may keep standard server logs (IP address, browser, pages requested) for security and reliability.

What we never do

• sell or rent your data
• use it for advertising or build profiles
• read your projects, code or logs

Who else processes your data

• Polar Software, Inc., for payments and licensing. Its own privacy policy covers what it collects at checkout.
• Resend, Inc., to send account confirmation, password-reset and security-notice emails (a changed password, a deleted account). See its privacy policy.
• Google, only if you choose to continue with Google. See its privacy policy.
• Our hosting provider, for the website’s server logs and the account database.
• Cloudflare, Inc., which stores the installers and serves each download.
• Authorities, only when the law requires it.

Polar is based in the United States, so purchase and license data may be processed there.

How long we keep it

• Purchase records: as long as tax and accounting law requires.
• Website accounts: until you delete yours on the account page, or ask us to.
• Support emails: until your question is resolved, then for a reasonable period in case it comes back.
• Files on your computer: until you delete them. Deleting ~/.nightjar removes everything NightJar stored.

Your rights

You can ask us for a copy of your data, or ask us to correct or delete it. You can also object to how we use it. Email support@getnightjar.space. We may need to keep purchase records the law requires. If you are in the EU, UK or a similar jurisdiction, you can also complain to your data protection authority.

Children

NightJar is a developer tool and is not directed at children under 16.

Changes

If this policy changes, we update this page and the date at the top. If a change affects how we use data you already gave us, we will say so here before it takes effect.