Privacy
Ledge runs on your Mac and keeps what it reads there. This page lists every place data goes outside it, and what goes with it.
Who this is
Ledge is made and sold by the Ledge team. Questions about anything on this page: support@ledgeformac.com.
What the app collects
Nothing about you or how you use it. Ledge has no account system, no analytics, no telemetry and no crash reporting. There is no Ledge server. Widgets read from macOS on demand and keep what they need in Ledge’s own folder on your Mac.
Each widget asks for its own macOS permission the first time you add it — Calendar, Reminders, Mail, Contacts, Location, Automation and so on. You can revoke any of them in System Settings → Privacy & Security.
License activation
The one thing the app itself sends over the internet is a license check. Purchases and license keys are handled by Polar, which is our merchant of record. Polar collects your name, email and payment details at checkout, handles taxes and receipts, and issues the key. We never see your card details.
When you paste a key into Ledge, the app calls Polar’s customer-portal license API with three things: the key, a label taken from your Mac’s name (the same one you see in Sharing), and a SHA-256 hash of this Mac’s hardware UUID. It also attaches your Mac model identifier (for example Mac15,3) and macOS version so a support ticket can name the machine. The raw hardware UUID never leaves the Mac; Polar only ever sees the hash.
After activation, Ledge revalidates the key with Polar about three seconds after launch and then once a day. The same three fields go with each check. If Polar is unreachable, the app keeps working offline for up to 30 days before locking. Deactivating a Mac in Settings → License releases the seat with the key and activation id.
Ledge stores the key, the activation id, the last successful check date and the seat counts in ~/Library/Application Support/Ledge/license.json, mode 0600. Failed calls are written to ~/Library/Logs/Ledge/license.log with the key redacted, so you can attach it to a support ticket. Nothing else about you is stored.
Polar’s handling of the checkout data and the key is covered by their privacy policy and terms.
Widgets that talk to the internet
Some widgets fetch from a third-party service you configure. Ledge does not proxy those requests and does not log them; the widget talks to its source directly.
Weather uses Open-Meteo. When location access is granted, Ledge asks CoreLocation for your coordinates and sends latitude and longitude to Open-Meteo to fetch the forecast. If you type a city name instead, that name goes to Open-Meteo’s geocoding endpoint and only the resolved coordinates are used after that. No key, no account, no other identifiers.
Calendar, Reminders, Mail and Contacts widgets read from the macOS system stores after you grant permission. Anything those accounts sync to the cloud is a matter between you, macOS and the account provider; Ledge does not talk to any of them.
Your rights
Because Ledge holds no personal data of its own, there is nothing on our side to export or delete for the app itself. For purchase records, email us and we will point you to the request form on Polar’s side; they hold the invoice and the payment details.
Changes to this policy
We may update this page as the product changes. Material changes will be noted here with a new effective date. Your license keeps working across changes.
Contact
Ledge · support@ledgeformac.com.
Effective 10 September 2026.