Privacy Policy

Effective date: 28 July 2026. This policy was restated for the v2 site.

MegaSuperSoft ("we", "us", "our") operates megasupersoft.com and publishes desktop software including FFFFinance, Ghosted, BruceOS, Astral Travel, and NodeUI. This policy explains what data we collect, what we don't, and why.

The short version

• megasupersoft.com sets zero non-essential storage, and — apart from the spam check on /hire — loads zero third-party resources. Even the fonts are served from our own origin. There's no cookie banner because there's nothing to disclose.
• Your data stays on your device. Our software is local-first.
• We don't sell data, run ads, or track you — on the website or in our apps.
• AI features are opt-in. Your data is never used to train AI models.

This website

megasupersoft.com does not load any tracking pixels, embeds, or advertising scripts, and it does not set any cookies. There is no analytics script, no PostHog, no Google Analytics, and no tag manager anywhere on this site. The webfonts are vendored and served from our own origin rather than a font CDN, precisely so that loading a page here does not hand your IP address to a third party. The single exception on the whole site is the spam check on the hire form, described below.

The only thing this website stores in your browser is a single preference — light or dark theme — in localStorage. That value never leaves your device and is used for nothing except rendering the site in the mode you picked. It is strictly functional, not tracking.

If we ever add a client-side analytics tool, it will be off by default and switched on only after you give affirmative opt-in — never a pre-ticked box, never implied consent from continued browsing. We will update this policy before any such feature ships.

Server-side analytics

We pull traffic analytics from Cloudflare's zone-level API into our own database to power an internal studio dashboard. This is a server-to-server API call between Cloudflare and our backend — it runs no code in your browser, sets no cookie, and writes nothing to your device. It gives us aggregate numbers about the site as a whole (requests, bandwidth, response status), not a profile of you individually.

The hire form

If you submit the form at /hire, we store exactly what you type into it: your name, email, company, budget band, and message, plus a plain referrer string (the page that sent you to us) so we know which channel to credit. We use this to reply to your enquiry and for nothing else.

That page is the one exception to “no third-party requests”, and we would rather name it than bury it. The form is protected by Cloudflare Turnstile, which loads a small widget from challenges.cloudflare.com when you open /hire and nowhere else on the site. Turnstile sets no cookie and builds no profile of you; it exists so the form is not a free relay for spam. If it fails to load, the form will not submit and you can email us instead.

Studio dashboard (megasupersoft.com/app)

Separately from the public website, we run an internal dashboard for our own project and metrics tracking, including the Cloudflare zone analytics described above. It is not a product for the public — access is restricted to MegaSuperSoft staff by Cloudflare Access, which authenticates at Cloudflare's edge before any request reaches our code. The only thing our application ever sees is the authenticated staff member's email address, and only so the dashboard can record who actioned a lead.

Dashboard data is stored in Cloudflare D1, encrypted in transit (TLS) and at rest by Cloudflare's infrastructure.

Desktop applications

FFFFinance

FFFFinance is a local-first application. All your financial data — transactions, accounts, categories, budgets — is stored in a local database on your device. We cannot access it.

Bank connections via Akahu. If you choose to connect your bank accounts, FFFFinance uses Akahu, a licensed open banking provider regulated by New Zealand financial authorities. When you connect:

• You authenticate directly with Akahu. We never see your bank credentials.
• Transaction data flows from Akahu's API directly into your local database.
• We do not receive, store, or have access to your bank data at any point.
• You can disconnect your accounts and revoke Akahu's access at any time from within FFFFinance or from Akahu's dashboard.

Akahu's own privacy policy governs how they handle your data during the connection process. We encourage you to review it at akahu.nz/privacy.

AI features. FFFFinance includes an AI assistant. AI operates in two modes:

• Local AI (default). Runs entirely on your device using Qwen3. No data leaves your machine. No internet connection required.
• Cloud AI (opt-in). If you choose to enable cloud AI, your prompts and relevant financial context are sent to the selected provider for processing. Responses are returned to your device and stored locally. We do not retain, log, or have access to your cloud AI requests.

In both modes: your data is never used to train AI models, and AI features only run when you explicitly trigger them.

Cloud sync (if available). If we offer optional cloud sync in the future, it will use end-to-end encryption. Your data will be encrypted on your device before transmission, and only you will hold the decryption keys. We will update this policy before any such feature ships.

Auto-update. FFFFinance checks for updates by making a request to our CDN. This request includes your app version and operating system. We do not log or store this information.

Other desktop applications

Ghosted, Astral Travel, and our other desktop applications follow the same local-first principles. Data stays on your device. We don't collect usage data or phone home. Product-specific details will be added to this section as needed.

Payments

We use Stripe to process payments. When you purchase a subscription or product:

• Your payment details (card number, billing address) are handled directly by Stripe. We never see or store your full card number.
• We receive a transaction confirmation, your name, email, and the last four digits of your card for record-keeping.
• Stripe's handling of your data is governed by Stripe's privacy policy.

AI sub-processors

When you opt in to cloud AI features, your data may be processed by the following providers. Each processes data solely to generate a response and does not use your data for model training:

We will update this table if we add additional AI providers. Local AI (Qwen3 via node-llama-cpp) runs entirely on your device and involves no third parties.

Third-party services

We use the following services to operate. Each processes data as described in their own privacy policies:

Social media

We maintain accounts on X (@megasupersoft), YouTube (@megasupersoftware), and Bluesky (@megasupersoft.bsky.social). Interactions on those platforms are governed by their respective privacy policies. We do not cross-reference social media data with product data.

Data retention

• This website: we hold nothing beyond the theme preference stored in your own browser.
• Hire form: retained for as long as needed to respond to your enquiry, then deleted.
• Desktop apps: all data is on your device. We hold none.
• Studio dashboard: staff session data is retained while the account is active. Aggregate zone analytics are retained indefinitely.
• Payments: transaction records are retained as required by NZ tax law (7 years).
• Email correspondence: we retain emails you send us for as long as needed to resolve your query, then delete them.

For data processed by third parties, refer to their respective privacy policies.

International data transfers

Our services use Cloudflare's global network, which means your connection data may be processed in multiple countries. Cloudflare maintains EU Standard Contractual Clauses for international transfers. New Zealand has an EU adequacy decision, meaning data transfers between NZ and the EU are permitted without additional safeguards.

Security

We take reasonable measures to protect your data:

• All connections to our services use TLS encryption.
• Database storage (Cloudflare D1) is encrypted at rest.
• We use scoped API tokens with minimum required permissions.
• Staff authentication to the studio dashboard uses OAuth — we never handle passwords directly.

We do not store sensitive credentials beyond what is required for service operation.

Your rights

New Zealand (Privacy Act 2020)

You have the right to:

• Access any personal information we hold about you.
• Request correction of any inaccurate personal information.
• Lodge a complaint with the Office of the Privacy Commissioner if you believe we've breached the Privacy Act.

We will respond to access and correction requests within 20 working days.

European Union and United Kingdom (GDPR)

If you are in the EU or UK, you also have the right to:

• Erasure — request deletion of your personal data.
• Portability — receive your data in a machine-readable format.
• Restriction — request we limit how we process your data.
• Objection — object to processing based on our legitimate interests.
• Withdraw consent at any time where processing is based on consent.

In practice, we hold very little personal information. If you believe we do, contact us and we'll respond within 30 days.

Do Not Track

We respect Do Not Track signals. Since we don't track you in the first place, there is nothing to disable.

Children's privacy

Our software is not directed at children under 16. We do not knowingly collect personal information from children.

Changes to this policy

We may update this policy from time to time. Material changes will be noted on this page with an updated effective date. We will not reduce your rights under this policy without giving notice.

Contact

For privacy questions or to exercise your rights:

• Email: privacy@megasupersoft.com
• Address: Wellington, New Zealand
• GitHub: github.com/megasupersoft

MegaSuperSoft's Privacy Officer can be reached at the email address above.