Privacy Policy

The short version

Terminal Candy is a native macOS terminal that runs on your Mac. Your shell, its output, the commands you run, and your files never leave your computer. The only things we receive are what's needed to deliver and validate your license, keep the app healthy, and — if you choose to participate — run the community skin marketplace.

What we collect

When you buy a license, we collect your email address to deliver your license key and let you manage your license. We sign you in to your account and the community with a one-time magic link sent to that email.

License validation & free trial

To unlock the terminal, the app validates your license with our server. It sends your email, your license key, and a machine identifier — a one-way SHA-256 hash derived from your Mac's hardware UUID. That hash cannot be reversed to identify you or your computer; it only lets us count and limit activations (a license works on up to three of your personal machines). The server's response is cryptographically signed (Ed25519) so the app can trust it, and a cached, signed entitlement lets the app keep working offline within a grace window if our server is unreachable.

The 14-day free trial works the same way: on launch the app sends the machine hash (and app version) to our server, which records when that machine was first seen so the trial can't be reset by reinstalling. No email or other personal information is collected during the trial — just the one-way hash described above.

Anonymous usage & crash telemetry

To understand product health, the app may send aggregate, non-identifying information alongside license and update checks:

• App version, macOS version, and CPU architecture
• Session count and number of active days
• Whether a license is present (paid or unlicensed status)
• The one-way machine hash described above, used only to count distinct installs

If the app crashes, it may send a crash report on the next launch containing the app version, macOS version, CPU architecture, the machine hash, and the technical reason and stack trace of the crash.

We do not collect your name, your files, terminal input or output, the commands you run, your keystrokes, your prompts, or any other personally identifiable information. Our analytics do not retain your IP address.

Community content

The Terminal Candy community marketplace lets licensed users upload and share skins (an image plus a skin.json). If you upload a skin, post a comment, or like a skin, that content — along with the display name you choose — is publicly visible. Don't upload anything you wouldn't want to be public.

The community is moderated. Every skin page has a Report button; a skin reported by multiple community members is automatically taken off the gallery pending review, and we may remove any content that violates our Terms of Service. If you report a skin or a comment, we record your account email alongside the report so we can review it and prevent abuse of the reporting system. Likes and comment upvotes are likewise recorded with your account so each member can only vote once.

Profiles & community records

If you create a community profile, your username, avatar, and bio are public, along with — subject to your privacy toggles in your account — your uploads, likes, and comments on your profile page. The toggles control what your profile page aggregates; skins and comments you post remain visible in the gallery itself either way. Your email address is never shown publicly. Your account also stores a private preference for whether mature (NSFW) skins display unblurred for you; it is tied to your account and never shown to anyone else.

To keep the marketplace honest we also keep some housekeeping records: content fingerprints (one-way hashes of uploaded images and manifests, used to detect duplicate uploads), uploads held for moderation review (deleted entirely if declined), moderation and report records, and — if you participate in the upload-10 refund program — your request, your published-skin count, and the decision. We email you about actions on your own content and requests (for example, an approval or a takedown); these are service emails, not marketing.

Content removal & artist requests

If you are an artist, designer, or rights holder and believe a skin in the community gallery uses your work without permission — or you simply want something that depicts you or your work taken down — email support@terminalcandy.com with the subject "Removal request" and a link to the skin. You don't need a Terminal Candy account or license to make a removal request. We review every request and remove infringing or disputed content promptly.

Uploaders can delete their own skins at any time from their account, and can request deletion of all their community content along with their personal data as described under Data retention.

Payment processing

Payments are handled by Stripe. We never see or store your card details. Stripe's privacy policy governs your payment information.

Where your data lives

Your email, license records, and any community content are stored on Cloudflare infrastructure (D1 database and R2 storage). License emails are delivered through Resend. We do not sell, rent, or share your information with anyone beyond these processors, who act on our behalf to run the service.

Data retention

License data is retained for the lifetime of your license. Aggregate usage and crash data is retained for up to 12 months for product analytics. You can request deletion of your personal data (email and license records) at any time by emailing support@terminalcandy.com.

International users (GDPR)

If you are in the European Economic Area, the United Kingdom, or Switzerland:

• Legal basis: we process your email on the basis of contractual necessity (delivering and managing your license). Aggregate usage and crash data is processed on the basis of our legitimate interest in keeping the product working well.
• Your rights: you may access, correct, delete, or port your personal data, and object to or restrict processing. Email support@terminalcandy.com to exercise these rights.
• Data transfers: data is processed on Cloudflare infrastructure, which may involve transfers outside the EEA under appropriate safeguards.

Children's privacy

Terminal Candy is not intended for children under 13, and we do not knowingly collect personal information from them. If we learn we have, we will delete it promptly. Mature (NSFW) community content is blurred by default and restricted to signed-in adults 18 and over, as described in our Terms of Service.

Changes to this policy

We may update this policy from time to time. Changes are posted here with a new "Last updated" date. Continued use of Terminal Candy after changes constitutes acceptance.

On July 13, 2026 the product was renamed from Terminajig to Terminal Candy. This policy applies to the product under both names; licenses purchased under the Terminajig name remain valid and unchanged.

Contact

Questions? Email support@terminalcandy.com.