Privacy Statement

Proxyman LLC ("Proxyman," "we," "us," or "our"), 1209 Orange Street, Wilmington, Delaware 19801, United States, provides TCP Viewer and is the controller of personal data described in this Privacy Statement.

This Statement covers the TCP Viewer macOS app, website, checkout integration, licensing backend, License Manager, update delivery, and support. It does not replace the privacy policy of Stripe, Sentry, Apple, or another service you choose to use.

1. The short version

• Packet capture and inspection happen on your Mac. TCP Viewer is not designed to send us packet contents, payloads, browsing history, DNS queries, hostnames, URLs, or capture files.
• Optional crash reports and app analytics help us diagnose problems and understand product use. You can turn them off in TCP Viewer settings.
• Paid activation sends license, device, app, and operating-system details to our licensing service.
• The owner of a Team plan's purchase email can see and revoke devices attached to that license.
• Stripe processes payment details. We receive the order and payment-status information needed to deliver and support the license.
• We do not sell personal data or use TCP Viewer data for targeted advertising.

2. Information we collect

App diagnostics and analytics

If enabled, TCP Viewer may send:

• App version, macOS version, device model or architecture, and basic runtime details.
• Crash stack traces, error messages, hangs, and related diagnostic context.
• App launches, session activity, feature-use events, performance signals, and reliability events.

We use this data to fix crashes, improve performance, and understand which product workflows need work. We do not intentionally include packet contents, capture files, license keys, or protocol payloads in diagnostic events.

You can turn off crash reporting and app analytics under TCP Viewer > Settings > Privacy. The change applies to future diagnostic events from that Mac.

License and device data

When you activate, validate, renew, or manage a paid plan, we may process:

• Customer name and email address.
• License key, plan type, status, seat count, purchase date, update date, and renewal eligibility.
• App-specific device identifier, device name, activation identifier, platform, build number, app version, macOS version, activation date, revocation status, and last successful check.
• Signed license-receipt claims and credential status used to validate offline access.
• License Manager access requests, hashed access tokens, expiry dates, and device-management actions.

The app-specific device identifier is used to recognize an activated installation. We use this information to deliver the paid entitlement, enforce seat limits, verify Team licenses, prevent abuse, provide License Manager, and answer support requests.

A signed receipt stored on your Mac may contain the purchase email and device and license claims. Treat that receipt as private even though it does not contain a payment-card number.

Team-plan administrator visibility

The person who controls the purchase email can request License Manager access. License Manager may show the plan, license key, update date, seat use, device names, device identifiers, platforms, and recent activity for Macs attached to that license. The administrator may revoke a device.

If an organization gives you a Team key, that organization is responsible for telling you how it uses License Manager information and for authorizing its administrators. Ask the organization to use a device name that does not expose unnecessary personal information.

Purchases and checkout

Stripe-hosted Checkout may collect name, email, billing address, tax information, payment method, and other information needed to process a transaction. Stripe handles full payment-card details under its own privacy policy.

We may receive and store customer name and email, product, seat quantity, amount, currency, order status, Stripe customer, checkout, payment, and transaction identifiers, payer details, and fraud or dispute information. A payer may be different from the Team plan's purchase owner. We use this data for fulfillment, receipts, renewals, seat extensions, refunds, accounting, fraud prevention, and support.

Website, service, and security logs

Our website, backend, content-delivery, and hosting systems may process IP address, request time, requested path, response status, browser or app user agent, and similar network and security data. We use this information to deliver the service, rate limit abuse, troubleshoot failures, and protect the service.

Sensitive License Manager tokens and license credentials should not appear in ordinary access logs. Error alerts may include request path, IP address, user agent, and limited provider error identifiers, but we avoid copying license request bodies or bearer credentials into those alerts.

Support and security reports

If you contact us, we process the information you provide, such as your email, message, license and app details, and attachments. Do not send packet captures, credentials, license keys, personal data, or confidential logs unless we ask for a specific safe way to provide them.

3. Information TCP Viewer does not collect from captures

TCP Viewer is not designed to collect or upload:

• Packet contents, payloads, or captured traffic streams.
• DNS queries, hostnames, URLs, or browsing history observed in a capture.
• Pcap, pcapng, or TCP Viewer session files that you open, save, or export.
• Raw HTTP, TCP, TLS, DNS, UDP, or other protocol data from a capture.
• Unrelated files, keystrokes, or activity in other apps.

This does not prevent you from intentionally sending a file through email, GitHub, or another service outside TCP Viewer. Those services have their own privacy practices.

4. How we use information

We use personal data to:

• Deliver purchases, paid features, updates, license checks, and device management.
• Send license keys, access links, receipts, renewal or seat-extension confirmations, and service notices.
• Provide support and respond to security reports.
• Diagnose crashes, improve reliability, and understand broad feature use.
• Prevent fraud, enforce seat limits, rate limit abuse, and protect customers and services.
• Keep accounting, tax, audit, dispute, and legal records.
• Comply with law and enforce our agreements.

5. Legal bases for processing

Where privacy law requires a legal basis, we rely on:

• Contract: to process purchases, deliver and verify licenses, manage seats, send transactional messages, and provide requested support.
• Legitimate interests: to secure the service, prevent fraud, keep appropriate business records, diagnose failures, and improve TCP Viewer, balanced against your rights.
• Consent: for processing where we ask for consent, and where applicable law requires consent for optional diagnostics or another feature. You may withdraw consent for future processing.
• Legal obligation: for tax, accounting, sanctions, lawful requests, and other duties that apply to us.

6. How we share information

We do not sell personal data or share it for cross-context behavioral advertising. We disclose only what is needed to:

• Stripe for checkout, payment processing, fraud prevention, refunds, and disputes.
• Sentry for enabled crash and diagnostic reporting.
• Hosting, database, content-delivery, and security providers that run the website, backend, downloads, and service protection.
• Transactional email providers that deliver keys, access links, confirmations, and support messages.
• Slack and similar internal communication providers for limited purchase and operational alerts to authorized team members.
• Professional advisers, auditors, and authorities when needed for legal, security, accounting, or compliance purposes.
• A buyer or successor if we reorganize, finance, sell, or transfer the relevant business, subject to applicable law.

Providers may process information only for the contracted service and their own lawful obligations. Links to third-party sites are governed by those sites' privacy statements.

7. Retention

We keep data only as long as reasonably needed for the purposes above:

• License, device, order, and audit records may remain for the life of the paid entitlement and afterward when needed for support, accounting, tax, fraud prevention, security, or disputes.
• License Manager links expire, and the backend stores access tokens as hashes. Expired token records may remain until routine cleanup.
• Pending notification data remains until delivery succeeds or the job is resolved.
• Crash, analytics, web-log, email, and internal-alert retention follows our operational needs and provider settings.
• Support and security correspondence remains while the request is active and afterward when needed for follow-up or legal records.

We delete or anonymize information when it is no longer needed, unless law requires or permits longer retention. Backup copies may remain until they rotate out under normal backup schedules.

8. International transfers

Proxyman LLC is based in the United States, and our providers may process data in the United States, Singapore, and other countries. Those countries may have different privacy laws from your country.

Where required, we use recognized transfer mechanisms and contractual safeguards, or rely on another lawful basis for the transfer. Contact us if you want more information about safeguards relevant to your data.

9. Security

We use technical and organizational measures intended to protect personal data. These include limiting the data we collect, restricting access, using transport encryption, hashing License Manager tokens, separating signing secrets from public clients, and avoiding license credentials in ordinary logs. No service can guarantee absolute security.

See the Security Policy to report a vulnerability. Do not include real license keys, access links, packet contents, or personal data in a public report.

10. Your choices and rights

You can use the website and GPL-covered software without activating a paid plan. Without activation, the licensing service does not receive a paid-plan key or create an activated device record for that Mac.

You can turn off future crash reports and app analytics under TCP Viewer > Settings > Privacy. You may also contact us to request access, correction, deletion, restriction, or a portable copy of personal data, or to object to certain processing. You may withdraw consent where processing relies on consent.

These rights depend on your location and may have legal exceptions. We may need to verify your identity, for example through the purchase email, before acting. If a company controls your Team plan, contact that company for requests about its use of administrator-visible device information. You may also complain to your local data-protection authority.

We do not discriminate against you for exercising a privacy right.

11. Children

TCP Viewer is a developer tool and is not directed to children under 13. We do not knowingly collect personal data from children. Contact us if you believe a child provided personal data.

12. Changes to this Statement

We may update this Statement as TCP Viewer or the law changes. We will change the "Last updated" date and provide additional notice when required by law.

13. Contact

For privacy questions or requests, email tcpviewer@proxyman.com.

Proxyman LLC, 1209 Orange Street, Wilmington, Delaware 19801, United States