Privacy Policy

Last updated: 9 September 2026

SocialQuack is a social media scheduler that you install and run on your own computer. This policy explains what data the software handles, what the small number of online services behind it see, and what this website collects. The short version: your posts, your social accounts and their access tokens stay on your computer. We do not have them.

Contact: [email protected].

1. The SocialQuack app on your computer

The app stores everything it needs in a data folder on your machine:

None of this is sent to us. There is no SocialQuack account, no sign-in and no server that holds your content. Backups you export are files on your computer; they contain live credentials, so treat them like passwords.

When the app publishes a post it talks directly to the platform (Meta, X, LinkedIn, Bluesky, Mastodon and so on) using the credentials on your machine. Each platform's own privacy policy governs what happens to the post from there.

If you connect an AI assistant such as Claude or ChatGPT through the app's MCP server, the assistant reads your queue and creates posts through that connection. The assistant provider's privacy policy applies to what you type to it; SocialQuack sends nothing to them on its own.

2. Online services the app uses

A few things need a server. Each one sees as little as possible.

License activation. When you enter a license key, the app sends the key and your computer's name to our license server at socialquack.com (for keys bought through Stripe) or to Lemon Squeezy (for keys bought there) to activate it, and re-checks it about once a day. Our license server stores the key, your name and email from the purchase, the activation names and, if you arrived through a campaign link, the campaign tags (source, medium, campaign, referrer). Stripe or Lemon Squeezy holds the payment record (name, email, payment details) under its own privacy policy. We can see orders and keys in their dashboards and in our own database, and use them only to support you and prevent abuse.

Update checks. The app checks for new versions by fetching a small file from our release server, roughly every six hours and when you ask it to. That request carries no personal data beyond your IP address and the app version, which we do not log.

Sign-in relay (socialquack.com/oauth/callback). Some platforms only accept an https address when you connect an account. The app therefore sends you through a static page on this site that immediately forwards the platform's response back to the app on your computer. The page stores nothing and only forwards to localhost. Platforms may also call our uninstall and data-deletion endpoints; those acknowledge the request and hold no data, because there is none here to delete.

Media relay (socialquack.com/media). Instagram, Threads and TikTok only accept photos and videos from a public web address. When you post to them, the app uploads a temporary copy of the attachment to our relay, the platform fetches it within seconds, and the copy is deleted automatically within 24 hours. The upload is authorised with your license key. We keep a per-key record of how much was uploaded each day (a hash of the key, the number of files and bytes, and the name of the last file) so we can enforce fair-use limits and act on abuse. We do not look at, index or reuse the media. You can turn the relay off by pointing the app at your own storage bucket in Settings → Media hosting, in which case we see nothing.

3. This website

Waitlist and newsletter. If you give us your email address we store it, with the page you came from, to send you the emails you asked for. Unsubscribe links are in every email; you can also write to us to be removed.

Purchases. Checkout happens on Stripe's pages. We receive your name, email and order details so we can support you and issue your license key, which we email to you through Resend, our email provider.

Analytics and advertising. If analytics are enabled on this site they run through Google Analytics, which sets cookies and processes your IP address under Google's policy. If we run ads, the site may also load the Meta, X or Google Ads pixels, which record a page view and, after a purchase, the purchase amount, so we can measure which ads work. We keep the campaign tags from the link you arrived on in a cookie for 14 days.

Server logs. Our host, Cloudflare, keeps standard request logs (IP address, user agent, time, URL) for security, for a limited time.

4. What we don't do

We do not sell or rent personal data. We do not use your posts, your followers or your platform data for anything. We do not train AI models on your content. We do not run advertising trackers.

5. Legal basis and retention

We process data to perform our contract with you (selling and activating the software, running the relays), for our legitimate interest in keeping the service secure and abuse-free, and, for marketing emails, with your consent. Purchase records are kept as long as tax law requires. Waitlist and newsletter emails are kept until you unsubscribe. Media relay copies are deleted within 24 hours; relay usage records are deleted after 90 days. Everything on your own computer is yours to delete at any time: removing a channel in the app deletes its token, and deleting the app's data folder removes everything.

6. Your rights

If you are in the UK or EU you can ask us to access, correct, delete or export the personal data we hold about you, or object to our processing of it. Email [email protected] and we will answer within 30 days. You also have the right to complain to the Information Commissioner's Office (ico.org.uk) or your local data-protection authority.

7. Platform data and deletion

When you connect a platform account, the platform shares your profile details and an access token with the app on your computer. To remove them, open SocialQuack → Channels and click Remove, or revoke the app from the platform's own settings. Because we hold none of that data on our servers, there is nothing further for us to delete; platform-initiated deletion requests are acknowledged automatically.

8. Children

SocialQuack is not directed at children under 16 and we do not knowingly collect data from them.

9. Changes

We will update this page when anything changes and note the date at the top. Material changes will also appear in the changelog.