The software collects nothing, and the one connection it makes is to check for a new version, with your permission. Buying a licence involves Stripe, and that is where the data is.
Last updated 30 September 2026.
Mark Hammond is the data controller for this website and for purchases made through it. Contact: hello@sessionupdater.com.
Session Updater makes one kind of network connection: checking for a new version. Nothing else. Not when you activate it, not when it processes a document. There is no telemetry, no crash reporting and no licence server. Nothing about your work, your sessions or your machine is transmitted anywhere.
An update check asks sessionupdater.com for the list of current versions. It sends the name and version of the app you are running, and nothing else. The app does not check until you have said it may: on macOS it asks, the second time it opens, whether to check automatically, and you can change that answer or check by hand from the About panel. If a newer version is available it is downloaded from GitHub, where the downloads on this site also come from, and installed only when you choose. Cloudflare and GitHub see your IP address in the course of answering those requests, as any host does. The Windows version does not check for updates.
Three things are written to your own disk and stay there:
Session Updater ~/Library/Application Support/Session Updater for rxdoc files/license.txt.
Deleting that file returns the app to its unactivated state.The documents and audio you open are read from, and written to, wherever you point the app. They are never copied anywhere else.
The site is static, hosted on Cloudflare Pages. It runs no advertising. The only cookies it sets are Google Analytics cookies, and only if you accept them.
_ga and _ga_* cookies, which last up to two
years. IP addresses are not stored by Google Analytics, advertising
features are off, and Google acts as our processor. You can withdraw
consent at any time from Cookie settings at the foot of
every page; declining deletes the cookies.When you buy, this is what is collected and why:
| What | Why | Where it goes |
|---|---|---|
| The name the licence is issued to | It is cryptographically bound into your key; the key cannot exist without it. | Our records; your key |
| Your email address | To send you the key, and so we can find your purchase if you write to us. | Stripe, Resend, our records |
| Billing address and country | Required by the payment processor to take a card payment and to check it against fraud rules. | Stripe |
| Card details | To take the payment. | Stripe only — we never see or hold them |
hello@sessionupdater.com.Your name, email, the key issued and the date are kept for as long as the licence is valid — which, since licences are perpetual, means indefinitely. This is what lets us re-issue a key you have lost without asking you to buy again.
Records of the sale itself are kept for six years, the period UK tax law requires business records to be retained for. That obligation outlives a request to erase, so a deletion request removes everything discretionary but cannot remove the transaction record until that period has passed.
We do not send marketing email and there is no mailing list to be on.
Under UK GDPR you may:
Write to hello@sessionupdater.com. If you are unhappy with how we have handled it, you can complain to the Information Commissioner's Office at ico.org.uk.
Processing your purchase details is necessary to perform the contract between us. Keeping the sale record is necessary to comply with a legal obligation. Serving and protecting the website rests on our legitimate interest in it working and not being abused.
If this policy changes, the date at the top changes with it. Material changes affecting existing customers will be emailed.