Privacy
The Keçiyol app has no accounts, analytics or tracking, and your traffic never passes through our servers. The website counts visits with cookieless, self-hosted analytics.
The app
Your settings and VPN configurations stay on your Mac. Tokens, account numbers, VPN passwords and your licence key are kept in the macOS Keychain. Keçiyol doesn’t collect usage data or crash reports.
The app only talks to these services, and only for these reasons:
- Licence check (Polar). When you activate, and about once a day after that, Keçiyol sends your licence key, its activation ID, your Mac’s name and a one-way hash of your Mac’s hardware ID. The hash lets one key work on one Mac without revealing the hardware ID itself.
- Exit check. While connected, Keçiyol asks
am.i.mullvad.netwhich address your checked apps and your other apps appear to come from. That service sees both addresses. - NordVPN and Mullvad setup. Only if you use them: Keçiyol sends your access token or account number to that provider to fetch servers and, for Mullvad, to register this Mac as a device.
- Encrypted DNS. In Bypass DPI mode with encrypted DNS turned on, the names your checked apps look up are sent to the resolver you pick: Cloudflare, Google or Quad9.
In VPN mode, your checked apps’ traffic goes to the VPN provider or server you configured, under their privacy policy. Everything else uses your normal connection.
Buying Keçiyol
Purchases are handled by Polar, our merchant of record, which processes your payment and handles tax. Polar shares your name, email address and order details with us so we can deliver your licence and help you. We never see your card details. See Polar’s privacy policy.
This website
keciyol.com counts visits with Umami, an open-source analytics tool we run ourselves on a server in Europe. It loads from keciyol.com like the rest of the site. It records which pages are viewed, the referring site, your browser, operating system, device type, screen size, language and country, and a few actions such as clicking Buy, playing the video or opening a FAQ question. It sets no cookies, doesn’t follow you to other sites, doesn’t store your IP address and keeps nothing that identifies you. If your browser sends Do Not Track, nothing is counted.
If you ask to be emailed at launch, we keep that email address and the date you signed up, stored with Cloudflare. To keep bots off the list, the sign-up form uses Cloudflare Turnstile, which checks your browser without cookies for tracking. We use the address only to send one launch email, then delete the list. To be removed sooner, write to [email protected].
The site loads no other third-party scripts, and its fonts are served from this domain. If you pick a light or dark theme, that choice is saved in your browser only. The site is hosted on Cloudflare, which processes requests and may keep short-lived logs for security.
Contact
Questions or requests about your data: [email protected].