Privacy Policy

Last updated: September 2026

The short version

Your business data never leaves your machine. Metzger Planning has no analytics, no usage tracking, and no account system. The one thing an installed copy does send us is a daily licence check, described in full below, which carries no business data. Everything else we hold comes from buying on this website or emailing us.

What the app sends

Your business data stays on your machine. Your workbooks, sales history, forecasts, scenarios, costs, suppliers, and customer information are read and written locally. They are never uploaded to us, and we have no way to see them.

So that a paid licence can renew and reach the right machine without you pasting in a new key, an installed and licensed copy contacts our licensing endpoint about once a day. That request contains exactly three things:

• the customer identifier issued when you subscribed;
• a machine identifier: an irreversible SHA-256 hash of your operating system name, hostname, network adapter address, and system disk serial number. We store and receive only the hash, never the underlying values;
• the version number of the installed application.

As with any web request, our server also records the network (IP) address it came from. We use that data for one purpose: to confirm an active subscription, issue the signed licence key for that machine, and tell the app whether a newer version is available. We do not use it to build a usage profile, and we do not sell or share it.

A copy with no licence installed never makes this request. A copy that cannot reach the endpoint keeps working offline for a grace period.

The app sends no file contents, no data from your workbooks, no analytics, no crash reports, and no feature or usage telemetry of any kind.

What the website collects

• Checkout: when you subscribe, Stripe collects your name, email, and payment details to process the transaction. Card details go only to Stripe - they never touch our servers. Stripe's handling of your data is described in Stripe's privacy policy. We receive your name, email, and subscription record so we can deliver the download, issue licence keys, send receipts, and provide support.
• Licence records: we store your customer identifier, the machine identifier hashes for your seats, your seat count, and your subscription status in Cloudflare Workers KV, so that the daily check described above can answer. No business data is stored there.
• Email: if you email us for support or a setup call, we keep the correspondence so we can help you.
• Hosting: the site and the licensing endpoint are served by Cloudflare, which processes standard request logs (IP address, browser type) to deliver and secure them.

What we don't do

• No advertising or tracking cookies.
• No analytics or usage tracking, in the app or on this site.
• No selling or sharing of your information with third parties, other than the processors named above (Stripe, Cloudflare) doing the jobs described above.
• No marketing emails unless you ask for them.

Retention and your rights

We keep subscription records as long as needed for support, accounting, and tax obligations. Licence records are deleted when a subscription ends. You can email support@metzgerplanning.com at any time to ask what we hold about you, to correct it, or to request deletion of anything we are not legally required to keep.

Metzger Planning is sold for use in the United States and our processors store data in the United States. If you access the site from elsewhere, your information is processed in the US.

Who we are

This site and the software are operated by Jonathan Metzger, a sole proprietor located in San Diego, California, USA, trading as Metzger Planning. Questions about privacy go to support@metzgerplanning.com.

Changes

If this policy changes, the updated version will be posted here with a new date.