In short: your apps' sound never leaves your Mac and is never recorded. Potar has no user accounts. The website and the app count downloads and active users with pseudonymous identifiers, without keeping IP addresses, and the app lets you opt out of this count.

Sound and app usage

Captured sound (“System Audio Recording” permission) is played live on the output you choose. It is neither stored nor sent anywhere.
Your settings (outputs, volumes, shortcuts) stay on your Mac.
Now-playing titles and browser tabs are read on your Mac (through macOS automation permissions) and are not transmitted. The optional Chrome extension only talks to Potar, on your Mac (local address 127.0.0.1).

App updates and statistics

Potar checks for updates on potar.app about once an hour. If “Share anonymous statistics” is on (Settings → Privacy, on by default), this check also sends:

a random installation identifier, created on first launch, which is not derived from any characteristic of your Mac;
about once a week, Sparkle's system profile (Potar and macOS versions, Mac model, processor type and count, memory, language). The site only keeps the Potar and macOS versions and the Mac model.

On the server, the identifier is hashed with a secret key before being written: it never appears in clear text. This data is only used to count active users and to know which macOS versions to support. If you turn the option off, update checks continue but your Mac is no longer counted.

The potar.app website

Downloads: each download of the installer is logged with its date, the page it came from and a pseudonymous identifier computed from the IP address and browser type, hashed with a secret key. The IP address itself is not kept in these statistics.
The site is hosted by Cloudflare. Like any host, Cloudflare keeps technical logs (including IP addresses) for security and operations, for a short time. Cloudflare is a US company that adheres to the EU–US Data Privacy Framework.

Retention, legal basis and controller

Website and app statistics: kept for 13 months, then deleted.
Legal basis: legitimate interest in measuring Potar's usage and maintaining it (with a right to object in the app).
Data controller: Franck.

Your rights

You can request access to, correction or deletion of your data, or object to its processing: contact@potar.app. Since statistics are pseudonymous, include your installation identifier if relevant. You can also lodge a complaint with the CNIL, the French data protection authority.