Privacy policy

This policy explains what personal data getasoly.com and the Asoly app for macOS process, why, and what rights you have. It is written for the EU General Data Protection Regulation (GDPR), because Asoly is run from Germany, and it applies to everyone who uses the website or the app, wherever they live. Last updated 22 September 2026.

1. Who is responsible

The controller in the sense of the GDPR is:

Asoly is a one-person business. There is no data protection officer, because none is required by law. Write to the address above for anything about your data.

2. The short version

• The website is hosted on Cloudflare. Cloudflare sees the technical data of every request, as any host does.
• Google Analytics runs only after you accept it in the banner. It never runs without your consent.
• The Asoly app keeps your apps, keywords and rankings on your Mac. There is no account and no server of ours.
• The app asks Apple's App Store for rankings directly from your Mac, so Apple sees those requests the way it sees a search in the App Store.
• If you buy Asoly Pro, Lemon Squeezy is the seller and handles your payment details. We never see your card.
• Usage statistics from the app are off until you switch them on in the app's settings, and contain no keywords, app names or identifiers.

3. Hosting and server logs (Cloudflare)

getasoly.com runs on Cloudflare Workers and the Cloudflare network, operated by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. To deliver the pages Cloudflare processes the technical data of each request: your IP address, the address of the requested page, the referring page, browser and operating system, and the date and time. This is necessary to run the site, keep it available and defend it against attacks (Art. 6 (1) (f) GDPR, legitimate interest). Cloudflare is certified under the EU-U.S. Data Privacy Framework and acts as our processor. Our own request logs at Cloudflare are kept for at most seven days.

4. The free rank check on this site

The keyword tools on getasoly.com send the search term, the country and, if you enter one, the name of your app to our server, which queries Apple's public iTunes Search API (Apple Inc., One Apple Park Way, Cupertino, CA 95014, USA) and returns the results. Apple receives the search term from our server, not your IP address. Results are cached for a few minutes. We do not store your queries, except as an analytics event if you have accepted analytics (section 5). Legal basis: performing the tool you asked for (Art. 6 (1) (b) GDPR).

5. Analytics on this site (Google Analytics 4)

With your consent, this site uses Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, with Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, as a processor. Google LLC is certified under the EU-U.S. Data Privacy Framework.

Consent first. No Google script is loaded and no analytics cookie is set until you choose "Accept" in the banner. Before that, Google Consent Mode v2 defaults are set to "denied" for analytics storage, ad storage, ad user data and ad personalization. Accepting changes only analytics storage to "granted". The advertising signals stay denied in every case, Google Signals is off, and we run no advertising or remarketing.

What is measured. Page views and five named interactions: starting the app download (with the version), running a rank check (with the search term and country), opening an FAQ entry, following an outbound link, and the page the interaction happened on. Your email address is never sent to Google. Google truncates IP addresses before storing anything and, for visitors in the EU, collects the data on servers in the EU before forwarding it.

Cookies. After consent, Google sets the cookies _ga and _ga_* on getasoly.com for up to two years to recognise returning visits. Your choice in the banner is stored in your browser's local storage under asoly_cookie_consent; that entry is strictly necessary and sets no cookie.

Legal basis and withdrawal. Your consent (Art. 6 (1) (a) GDPR and § 25 (1) of the German Telecommunications Digital Services Data Protection Act, TDDDG). You can withdraw it at any time by choosing Cookie settings in the footer and selecting "Essential only". Analytics data is retained by Google for 14 months.

6. The Asoly app for macOS

Your data stays on your Mac. The apps you add, your keywords, markets, competitors, rankings and history are stored in a local database in the app's own support folder on your Mac. Asoly has no account, no login and no server of ours. CSV exports are files you create and keep yourself.

Requests to Apple. To find suggestions and check rankings, the app sends your keywords, the selected storefronts and the app ids you track to Apple's App Store search services directly from your Mac. Apple receives your IP address and the search terms, exactly as it would if you searched in the App Store app. We do not see these requests. Apple's handling of them is described in Apple's privacy policy. Legal basis: providing the app's core function (Art. 6 (1) (b) GDPR).

Notifications. Rank alerts are local macOS notifications generated on your Mac. There is no push server.

Usage statistics, opt-in. The app asks once whether it may share anonymous usage statistics. Nothing is sent until you say yes, and you can turn it off at any time under Settings, which stops collection immediately and discards anything still buffered. If it is on, the app sends event counts to Google Analytics 4 through the Measurement Protocol: which kind of action happened (for example app opened, app added, keywords added, refresh completed, keyword discovery completed, competitor scan completed, suggestion dismissed, alert delivered, markets changed, export created, tab selected, setting changed, onboarding finished, paywall shown with the limit that triggered it, checkout opened with the plan chosen, subscription started when a licence key is activated, and licence deactivated when a Mac releases its seat), how many items were involved, the market codes concerned, the app version, a random installation id that the app generates and stores on your Mac, and a session id. The installation id is not tied to your licence key, your hardware or your name. Keywords, app names, app ids, your licence key and anything you type are never sent. Google receives the technical data of the request, including your IP address, but we send no location data. Legal basis: your consent (Art. 6 (1) (a) GDPR).

Licence key and licence checks. If you buy Asoly Pro, your licence key is stored in the macOS keychain on your Mac, together with a random instance id that the licence server issues when you activate. To activate, re-check and deactivate the key, the app talks directly to api.lemonsqueezy.com, operated by Lemon Squeezy, LLC (Delaware, USA). Those requests contain the licence key, the instance id and — when you activate — the name of your Mac as it appears in macOS, so you can see in the customer portal which machine currently holds the licence. Lemon Squeezy also receives your IP address, as any recipient does. Asoly re-checks a running licence about once a week; if the check fails or your Mac is offline, Pro keeps working for 30 days from the last successful check. We operate no server in between and do not see these requests. Legal basis: performing the licence contract and protecting it against misuse (Art. 6 (1) (b) and (f) GDPR).

Updates. Asoly is not distributed through the Mac App Store. It updates itself using Sparkle, which asks getasoly.com for the update feed at getasoly.com/appcast.xml and downloads new versions from the same domain. The request carries what every HTTP request carries — your IP address, the time and the app version Sparkle names — and is logged by Cloudflare as described in section 3. Asoly sends no system profile with it. Legal basis: our legitimate interest in shipping security and bug fixes to installed copies (Art. 6 (1) (f) GDPR).

Buying Asoly Pro. Asoly Pro is sold through Lemon Squeezy, LLC (Delaware, USA) as merchant of record, which means your purchase contract is with Lemon Squeezy and not with us. Lemon Squeezy collects the data it needs for the sale — your email address, your payment details, your billing country and the tax data derived from it — and processes them as the controller for that transaction, under its own privacy policy. We never receive or store your card details. What reaches us from Lemon Squeezy is the information about the order we need to run the business: your email address, the plan, the status of the subscription and the licence key, which we use to answer support requests, to send information about your licence, and to meet our commercial and tax record-keeping duties (Art. 6 (1) (b) and (c) GDPR). The customer portal in which you manage or cancel the subscription, reachable through getasoly.com/account, is operated by Lemon Squeezy.

7. Email contact

If you email us, we process your address and message to answer you (Art. 6 (1) (b) or (f) GDPR). We keep correspondence as long as the conversation is open and as long as commercial and tax law requires us to keep business letters.

8. Recipients and transfers outside the EU

We share personal data only with the parties named above: Cloudflare (hosting, database, update feed), Resend (email delivery) and Google (analytics, only with consent) as our processors, plus Apple (App Store requests your Mac makes itself) and Lemon Squeezy (sale, payment and licence checks). Lemon Squeezy, LLC is the merchant of record and acts as its own controller for the purchase, not as our processor; its handling is governed by its privacy policy. Cloudflare, Google LLC and Apple Inc. are certified under the EU-U.S. Data Privacy Framework; where a transfer to the USA is not covered by such a certification, the EU standard contractual clauses apply. We do not sell personal data and we do not use it for advertising.

9. Your rights

Under the GDPR you can ask us for access to your personal data (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can object to processing based on legitimate interest (Art. 21) and withdraw any consent at any time with effect for the future (Art. 7 (3)). An informal email to info@baer-solutions.com is enough.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live, work or where the alleged infringement happened (Art. 77 GDPR). The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information (HBDI).

If you live outside the EU, for example in the United Kingdom, Switzerland or the United States, your local law may give you comparable rights. We honour them in the same way; the contact is the same.

10. Good to know

You are not obliged to provide any personal data; the website and the app work without an account. We make no automated decisions with legal effect and do no profiling. getasoly.com and Asoly are not directed at children under 16, and we do not knowingly collect their data. We will update this policy when the services or the law change and show the date at the top.