aesthetic.computer / core
Monorepo for Aesthetic.Computer aesthetic.computer
4
fork

Configure Feed

Select the types of activity you want to include in your feed.

system/public/menuband: privacy lists update-check + manual crash-upload endpoints

The "nothing leaves your Mac" tagline was no longer accurate now that
the popover does an hourly latest.json check and exposes a manual Send
button for any captured crash report. Both endpoints are now described
in full (URL, trigger, what's sent), and the third-parties section
names the CDN/VPS path. Also adds a dark-mode block matching the
rest of the menuband site.

prompt.ac/@jeffrey 14ee8fa7 c380af13

+37 -5
+37 -5
system/public/menuband/privacy.html
··· 103 103 text-shadow: 0 1px 0 rgba(255,255,255,0.7); 104 104 } 105 105 footer a { color: var(--ink-soft); } 106 + 107 + ul.flat { margin: 4px 0 10px; padding-left: 18px; } 108 + ul.flat li { margin-bottom: 4px; } 109 + 110 + @media (prefers-color-scheme: dark) { 111 + :root { 112 + --aqua-sky-top: #0e1a2e; 113 + --aqua-sky-bot: #04070d; 114 + --aqua-blue: #4a93ff; 115 + --panel-bg: #2c2c2e; 116 + --panel-stripe: #232325; 117 + --panel-edge: #2c2c2e; 118 + --titlebar-top: #2c2c2e; 119 + --titlebar-bot: #1f1f21; 120 + --ink-body: #ebebf0; 121 + --ink-head: #ffffff; 122 + --ink-soft: #98989d; 123 + } 124 + .window { 125 + background: #1c1c1e; 126 + box-shadow: 0 1px 0 rgba(255,255,255,0.06) inset, 0 10px 40px rgba(0,0,0,0.55); 127 + } 128 + .titlebar h1 a, .titlebar h1 a:visited { color: #d0d0d2; text-shadow: 0 -1px 0 rgba(0,0,0,0.5); } 129 + code { background: #2c2c2e; border-color: #3a3a3c; color: var(--ink-body); } 130 + } 106 131 </style> 107 132 </head> 108 133 <body> ··· 119 144 120 145 <div class="content"> 121 146 <h2>Privacy</h2> 122 - <p class="tagline">Short version: nothing leaves your Mac.</p> 147 + <p class="tagline">Short version: Menu Band only phones home for two things — a version check, and a crash report you have to send by hand.</p> 123 148 124 149 <h3>What Menu Band collects</h3> 125 - <p>Nothing. Menu Band makes no network requests. No analytics, no telemetry, no crash reporting, no opt-out checkbox to bury — there's nothing to opt out of.</p> 150 + <p>Nothing about you. No analytics, no usage telemetry, no automatic crash reporting, no account, no identifiers. The two network requests Menu Band makes are listed below in full.</p> 151 + 152 + <h3>Network requests Menu Band makes</h3> 153 + <ul class="flat"> 154 + <li><b>Update check (automatic).</b> Menu Band fetches a small JSON manifest from <code>https://assets.aesthetic.computer/menuband/latest.json</code> to find out whether a newer version exists. The request happens at most once an hour and includes only what your operating system attaches to any HTTP request (your IP address and a generic <code>URLSession</code> user-agent). It contains no identifier for you, your Mac, or your install. If a newer version is published, the popover shows a small banner; nothing is downloaded or installed automatically.</li> 155 + <li><b>Crash report upload (manual, button-press).</b> If macOS has captured a Menu Band crash log in <code>~/Library/Logs/DiagnosticReports/</code>, the popover shows a count and a <em>Send</em> button. Clicking <em>Send</em> POSTs the contents of that crash file (a standard Apple <code>.ips</code> / <code>.crash</code> diagnostic, which contains stack traces and runtime info but no documents you've authored) to <code>https://aesthetic.computer/menuband-logs</code>. The request also includes the Menu Band version string and the crash filename so we can group reports. Menu Band <b>never</b> uploads a crash report without you clicking <em>Send</em>.</li> 156 + </ul> 157 + <p>That's the complete list. There are no other network requests.</p> 126 158 127 159 <h3>What Menu Band stores locally</h3> 128 160 <p>A handful of preferences in <code>UserDefaults</code> on your own Mac: which input mode you last used, the selected General MIDI patch, the octave shift, and whether MIDI output is enabled. None of this leaves your machine.</p> ··· 131 163 <p><b>Accessibility access.</b> Asked for only when you turn on the <em>Notepat</em> or <em>Ableton</em> input modes. macOS requires this permission for any app that wants to receive global keystrokes (the rest of the time, your typing goes wherever it normally goes). Menu Band uses keystrokes solely to play notes; nothing is recorded, logged, or transmitted.</p> 132 164 133 165 <h3>Third parties</h3> 134 - <p>None. Menu Band uses only Apple's built-in CoreMIDI and AVAudioEngine for sound and MIDI. The virtual MIDI source named <code>Menu Band</code> is published to your Mac's CoreMIDI server so DAWs on your Mac can receive notes — that traffic is local-only.</p> 166 + <p>The two endpoints above are operated by aesthetic.computer; the manifest is served from Cloudflare's CDN in front of our DigitalOcean Spaces bucket and the crash endpoint is served from our own VPS. There are no third-party analytics, advertising, or data-sharing services. Audio and MIDI use only Apple's built-in CoreMIDI and AVAudioEngine. The virtual MIDI source named <code>Menu Band</code> is published to your Mac's CoreMIDI server so DAWs on your Mac can receive notes — that traffic is local-only.</p> 135 167 136 168 <h3>Children</h3> 137 - <p>Menu Band does not collect data, so there is nothing to disclose about users of any age.</p> 169 + <p>Menu Band does not collect data about users, so there is nothing to disclose about users of any age.</p> 138 170 139 171 <h3>Changes</h3> 140 - <p>If this ever changes (say, an update introduces an opt-in cloud feature), this page will be updated and the change called out in the app's release notes. The default will always be: nothing leaves your Mac.</p> 172 + <p>If anything else ever leaves your Mac (say, an opt-in cloud feature), this page will be updated and the change called out in the app's release notes. The default will always be: as little as possible, and never without your knowledge.</p> 141 173 142 174 <h3>Contact</h3> 143 175 <p>Email: <a href="mailto:mail@aesthetic.computer">mail@aesthetic.computer</a> · Web: <a href="https://aesthetic.computer">aesthetic.computer</a></p>