Privacy you can verify.

This notice explains what Mac 4 Breakfast and this website process, why, and the choices you have.

Controller

Aeon GbR
Sophia Schmieder & Kapish Bhardwaj
Brünnleinsweg 126
90768 Fürth, Germany
kapisch@icloud.com

The app

Everything stays on your Mac

Battery, device and energy data that the app reads is processed and stored locally on your Mac. The app does not upload it.

No account, no cloud

The app has no sign-in, profile, or cloud sync.

No ads or data sales

The app contains no advertising or third-party tracking SDKs. We do not sell app data.

Website processing

Website delivery and security

When you visit this website, Vercel processes the technical request data needed to deliver and secure it, including IP address, time, requested page, and browser or device information.

Cookieless analytics

We use Vercel Web Analytics to understand aggregated page views. It does not set advertising cookies or track you across websites.

Download and checkout measurement

When you select a download or purchase link, we record the campaign source, external referrer host, and country derived from the IP address. We use the IP address and browser information only to create a deduplication hash; we do not store the raw IP address or create a user profile.

Payment

A purchase redirects you to Lemon Squeezy. Lemon Squeezy processes checkout and payment data under its own privacy notice; we do not receive payment-card data.

Legal bases

We process technical request data, privacy-friendly measurement, and aggregate download or checkout measurement under Art. 6(1)(f) GDPR. Our legitimate interests are operating a secure, reliable website, understanding which pages and campaigns are useful, and preventing duplicate counts.

We do not use this website to make automated decisions about you.

Recipients, transfers, and retention

Vercel hosts the website and provides analytics. Upstash Redis stores aggregate download and checkout counters. Lemon Squeezy acts as an independent controller for checkout. Their services may process data outside the EEA; where that happens, we rely on the safeguards required by GDPR Chapter V.

The download deduplication hash expires after 30 minutes. We keep at most 200 recent, non-IP download events and retain aggregate counters only for as long as they are needed to evaluate website performance and operate the service.

Your rights

Subject to the GDPR’s conditions, you may request access, rectification, erasure, restriction, portability, or object to processing based on legitimate interests. Contact us at kapisch@icloud.com.

You may also complain to the Bavarian Data Protection Authority (BayLDA): lda.bayern.de.

Last updated July 2026. We will update this notice when processing changes.