Privacy

• This website has no analytics, no advertising and no tracking cookies.
• You don't need an account for anything that's available today. SakuDesk Free works without one.
• SakuDesk Free keeps its settings on your PC. Without an account, the only thing it asks us is whether a new version is out.
• If you make an account, we keep your name, email address, picture and plan, and use them only to run your account.
• If you subscribe to SakuDesk Premium, Paddle takes the payment as our reseller. We never see your card.
• We never sell your data, and we never use it for advertising.
• You can delete your account yourself, at any time, and it goes straight away.

PetalWorks makes SakuDesk and Hanii and runs this website. In this policy "PetalWorks", "we" and "us" mean the people behind it. We decide what's collected and why, so under data protection law (such as the GDPR in Europe and the UK) we're the controller of your data.

A contact address for privacy questions and requests will be listed here before accounts open to the public. Until then you can do everything this page describes from your account.

Reading this site doesn't ask anything of you. We don't run analytics, heatmaps, advertising, social media buttons or tracking pixels, and we don't use cookies.

Two things happen anyway, because of how the web works:

• Server logs. Whoever hosts the site records ordinary request logs: your IP address, the page asked for, the time and your browser's name. Hosts keep these to keep the site running and safe from abuse, usually for a few weeks. We'll name the host here once the site is public.
• The checkout. Once SakuDesk Premium is on sale, the Premium page loads Paddle's checkout script from Paddle, so Paddle receives your IP address and browser details when you open that page. That's how it shows the price in your currency. If you open the checkout, Paddle's own privacy policy covers what you give it.

Videos, pictures and the lettering on this site are files on the site itself. Nothing is streamed from YouTube, and no fonts come from Google or anywhere else.

A few small values are saved in your browser's own storage, on your device. They never leave it for anywhere except the sign-in service, and only when you sign in.

Because none of these are used to follow you around, the law doesn't ask us to put a consent banner in front of you. Clearing your browser's site data removes all of them.

Accounts are optional. They show your plan, and they're how SakuDesk Premium is bought and unlocked.

What we receive

You sign in through Google, Facebook, Discord or Microsoft. We never see your password. That service tells us:

• your name and email address,
• your profile picture, if you have one,
• an ID for your account on that service, so we know it's you next time.

We add which services you've connected, your plan, when you made the account and when you last signed in. Our sign-in provider also records the IP address of each sign-in in its security logs.

If you subscribe to SakuDesk Premium, Paddle tells us that your account has Premium, until when, whether it will renew, and the ids of your Paddle customer and subscription. That's how we show your plan and open your subscription for you. Paddle keeps your payment details; we never see them.

If you have Premium and keep Settings sync on in SakuDesk, your SakuDesk settings are kept in your account too, so they follow you to every PC you sign in on. Your wallpaper folders, speakers and Spotify or Discord sign-ins stay on each PC. Turning sync off in SakuDesk stops it.

What we use it for, and why we're allowed to

• To run your account: sign you in, show who you're signed in as, and connect more than one sign-in to the same account. This is needed to give you the account you asked for.
• To unlock what you've paid for, and to sync your settings if you ask for it. Same reason.
• To keep accounts safe: spotting and stopping abuse. This is in everyone's legitimate interest.

We don't send newsletters or marketing. If that ever changes it will be something you choose to turn on, not something you have to turn off.

Where it's stored

Accounts live with Supabase, our sign-in and database provider, in its data centre in Frankfurt, Germany. Supabase is a US company and works for us under a data processing agreement, with the European Commission's standard contractual clauses covering any access from outside Europe.

SakuDesk Free keeps its settings, its log and its cache in a folder in your Windows user folder (%USERPROFILE%\.sakudesk_free). It sends no usage statistics and no crash reports.

The downloaded app looks for a new version when it starts and every six hours, by fetching one small file from our releases folder at Supabase. That request carries nothing about you beyond what any download does: your IP address, kept briefly in Supabase's logs. If you sign in with a PetalWorks account (Settings, then Account), SakuDesk keeps the sign-in on your PC, protected by Windows for your user, and checks your plan with our accounts.

It talks to other services only when you use a feature that needs them, and then only for that feature:

Each of these has its own privacy policy. Your Spotify sign-in is saved in the same folder on your PC and is only ever sent to Spotify.

Hanii isn't available yet, so it holds nothing about anyone. Before it's released, this page will say exactly what it keeps and which services it talks to, the same way it does for SakuDesk.

Only the services we need to run things, and only what each needs:

• Supabase stores accounts and runs sign-in.
• Google, Meta (Facebook), Discord and Microsoft handle signing in when you choose them, under their own privacy policies.
• The site's host keeps the server logs described above.
• Paddle sells SakuDesk Premium for us as our reseller and merchant of record. It takes the payment, handles tax and receipts, and tells us your plan. We never see your card details.

Beyond that, we'd only share data if the law required it, and we'd tell you if we were allowed to.

• Your account stays until you delete it. Deleting it removes it at once.
• Sign-in security logs are kept by Supabase for a short time, typically days, and then thrown away.
• Server logs are kept by the host for a few weeks at most.
• Records of purchases, once there are any, are kept as long as tax law requires, usually several years, even after an account is deleted.

Wherever you live, you can ask us to:

• show you what we hold about you, and give you a copy you can take elsewhere,
• correct anything that's wrong,
• delete it, which you can do yourself from your account,
• stop or limit how we use it, or object to a use you disagree with.

Your account page already shows the main things we hold: your name, email address, plan and connected sign-ins. We'll answer other requests within a month and won't charge for them.

If you're in the European Union, the UK or a place with similar laws and you think we've handled your data badly, you can complain to your local data protection authority. We'd be grateful for the chance to put it right first.

1. Go to your account and sign in.
2. Choose Delete my account, then confirm.

This works however you signed in, including through Facebook. Your account and everything linked to it are removed straight away and can't be brought back. SakuDesk Free keeps working without it.

You can also remove PetalWorks from the connected apps in your Google, Facebook, Discord or Microsoft settings. That stops the service from letting you sign in to us. To remove what we already hold, delete your account as well.

If you can't sign in any more, a contact address for deletion requests will be listed here before accounts open to the public.

Anyone can read this site and use SakuDesk Free. To make an account you need to be at least 16, or older if the law where you live says so. If you think a child has made an account, ask us and we'll delete it.

Everything travels over encrypted connections. Sign-in uses a one-time code exchange (PKCE), so a sign-in can't be picked up halfway. The database only ever shows you your own row, and no web page can change your plan. Only server code can do that.

No system is perfect. If something ever went wrong with your data, we'd tell you and the authorities as the law requires.

When something changes, we'll update this page and the date at the top. If the change affects people with accounts, we'll also show a notice when you sign in, before it takes effect.

See also our terms of use and the help page.