Privacy policy

Studio OS · Last updated Oct 22, 2026 · Operator: MNDWRX

Short version

Studio OS is local-first: your leads, clients, proposals, invoices, and delivery notes are stored in your browser on each device you use, unless you export a backup or paste them elsewhere. Sync between your devices is optional. When you turn it on, your records are end-to-end encrypted on your device, then pass through and are stored on our sync server on Cloudflare, which cannot read them; the key stays on your devices. New devices confirm with a code we email to your purchase address through Resend. Buying uses Lemon Squeezy. The sales page and the app are served by GitHub Pages with self-hosted fonts. We do not run marketing analytics on the sales page or in the app.

What we collect directly

• Support email you send us (name, email, message, order ID if you include it) at support@mndwrx.com.
• No app telemetry or analytics in current builds.
• Device check (every new device on your key): your license key and that device’s Lemon activation ID go to our sync server, which asks Lemon whether they are valid and gets the buyer email on the order from Lemon. We store a scrambled (hashed) form of the key, not the key itself.
• Device list: for each device on your key we store a device name made from the browser (for example “iPhone · Safari”), its Lemon activation ID, when it was added, and when it last checked in. You can see and remove devices in Settings › Devices.
• Codes: we keep only a scrambled (hashed) form of each 6-digit code, with your email next to it, until the code is used or replaced; a code stops working after 10 minutes. Limits on code requests keep only the times of recent requests; per-network limits use a hash of your IP address, not the address.
• Sync data (only if you turn sync on): encrypted records and encrypted attached files, plus a hash of each linked desk’s password. We cannot read them. Short pairing codes expire after 15 minutes.

What third parties may process

• Lemon Squeezy — at checkout, invoices, refunds, and license emails: name, email, payment metadata, tax region, IP, order contents (payment, fraud, tax, delivery of digital goods).
• Cloudflare Pages: when you visit studioos.mndwrx.com, Cloudflare may log IP, user-agent, and requests to serve the static site and app files.
• Cloudflare (runs our sync and device-check server, studio-os-sync.mndwrxllc.workers.dev): stores the encrypted sync data and the device list above, and may log IP address, user-agent, and request details to run and protect the service.
• Resend (sends device emails from devices@mndwrx.com): receives your purchase email address and the message, which holds the code or the new device’s name and the time.
• Your own mail app and payment page: reminders and client acceptances open a mail app with the message written; a Pay now link opens the payment page you chose. Those services handle what you or your client send.
• License check: the app sends your license key and activation ID to Lemon Squeezy when you activate, and about once a day when online, to confirm the purchase (and to revoke after a refund).

Cookies & tracking

• Studio OS does not use marketing analytics cookies on the current sales page.
• Your browser stores the app’s records as local site data (localStorage and IndexedDB) on that device.
• Third parties above may set their own cookies on their domains (especially Lemon checkout).

Local data on your machine

Stored under browser keys such as studio-os-desk-v1, studio-os-license-v1, and studio-os-theme-v1. The sample desk uses its own key, studio-os-demo-v1.

• Backup: use in-app Backup to download JSON; Restore to load it.
• Wipe: clear this site’s data in your browser settings (and delete backup files you made).
• Clearing site data deletes local desk records — back up first.

What we do not do

• We do not sell your personal information.
• We never receive your client list in readable form. Without sync, it stays on your device. With sync, our server holds only an encrypted copy it cannot read.
• We do not use your email for marketing. It is used only to send device codes and new-device notices.

Retention

• Support emails: keep as long as needed to help you and meet bookkeeping/legal needs.
• Lemon retains purchase records per their policies.
• Local desk data retention is your choice on your device.
• Device list: until you remove the device in Settings, or ask us to delete it. Encrypted sync data: kept while you use sync. Email support@mndwrx.com to have it deleted.

Your choices

• Don’t use checkout if you don’t want to share purchase data with Lemon.
• Export then wipe local data anytime.
• Sync is off unless you turn it on. Use “Unlink this device” in Settings to stop syncing a device, and Settings › Devices to remove one from your key.

Children

Not directed at children under 13 (or under 16 where relevant); we don’t knowingly sell to kids.

Contact & changes

Privacy / support: support@mndwrx.com · America/Chicago. We’ll update this page if what the app sends or stores changes, and aim to say so on the sales page too.

Plain-English policy for buyers — not legal advice. For questions, email support@mndwrx.com (America/Chicago).