Suisai collects nothing

This page describes both the app and this website. It's written to be accurate rather than reassuring, so where something is processed, it says so.

The app

Suisai doesn't phone home, check licences online, load remote resources or report usage. There's no account to make and nothing to sign in to. It runs sandboxed, and asks for no system permissions.

It makes one network connection, and only in the direct download: a check for updates. The request asks the update feed which version is current, and reveals no more than opening any web page already does: your address and your language preference. It carries no identifier, no profile of your Mac, and nothing about your palettes. It says only this much about itself:

Suisai/1.0 Sparkle/2.9.6

Suisai has no permission to reach the network at all. That one request is made by a separate helper, sandboxed with exactly one capability and able to do nothing else, which you can check for yourself on the downloaded app rather than taking our word for it.

The App Store version doesn't check, because the App Store does that itself. It makes no network connection of any kind.

Your settings and recent picks are kept in macOS user defaults on your own Mac. Palettes are files you save where you choose. Folders you ask Suisai to watch are remembered as security-scoped bookmarks so it can read them again without asking each time. None of this leaves the machine.

A picture you open is read into memory on your Mac and sampled for colour. Nothing about it is stored, linked or written anywhere: not a copy, not a thumbnail, not a path back to the original. Saving a palette keeps the colours, never the picture. It's never uploaded.

This website

Every typeface is served from this domain. No fonts are fetched from anyone else's server. The site runs a little of its own script, written into the page rather than fetched: it remembers which theme you chose, and picks which of a screenshot clip's two versions to load. It sets no cookies and records nothing. The only script fetched from another server is Cloudflare's analytics beacon, described below.

It's hosted on Cloudflare Pages. Delivering a web page requires the host to receive the request, so Cloudflare processes connection data including IP addresses in order to serve the site and to protect it from attack. That's true of every website and every host, and it's not something done in addition to serving you.

Beyond that, visitor numbers are measured with Cloudflare Web Analytics. It loads one script, beacon.min.js, from Cloudflare, and reports that a page was viewed and which site linked you here. Cloudflare states that it uses no cookies and doesn't fingerprint your browser or profile you across sites.

Nothing here identifies you, and no attempt is made to. If you block the script, and plenty of people do, the site works exactly the same. You're simply not counted.

Buying

Purchases are handled by Paddle, who act as the merchant of record. They process your payment details under their own privacy policy, and they issue your receipt. Suisai never receives your card information.

Changes

If this ever stops being true, this page changes first.