Privacy Policy

Effective date: August 2, 2026

EWAS (“us”, “we”, or “our”), located in Kraków, Poland, operates the CRAX Commander macOS desktop application and related website (the “Service”).

This Privacy Policy explains how we handle information in connection with your use of CRAX Commander. We respect your privacy and are committed to minimizing data processing to only what is strictly necessary to provide and license the application.

1. Local File Processing & Zero Content Access

CRAX Commander is an offline-first desktop file management application for macOS. All file operations — including browsing, copying, moving, archiving, file viewing, and remote server connections (such as FTP, SFTP, WebDAV, Git, and SVN) — are executed entirely on your local machine and directly between your computer and the target destinations you specify.

We do NOT monitor, inspect, read, upload, or store any of your files, file names, directory trees, file contents, or metadata on our servers.

Any connection credentials, server passwords, or SSH keys you provide are stored strictly on your local device (using secure macOS Keychain storage where applicable) and are never transmitted to EWAS.

2. License Activation Data

The standalone version of CRAX Commander (obtained outside the Mac App Store) requires periodic online activation to verify license validity.

What is collected during activation:

  • Your license key or order number
  • An irreversibly hashed UUID / hardware identifier of your Mac
  • The date and time of the activation request

These values are processed exclusively to verify that your copy of CRAX Commander is used in accordance with the End User License Agreement (EULA) and does not exceed the permitted number of devices. All activation requests are transmitted over secure, encrypted HTTPS connections.

We guarantee that no personal documents, browsing activity, or unhashed personal identifiers are collected during activation.

3. Payments & Resellers (Merchant of Record)

Purchases of CRAX Commander licenses are fulfilled and billed by trusted third-party resellers acting as the Merchant of Record:

  • FastSpring (Bright Market, LLC) for website purchases
  • Apple Inc. for purchases made through the Mac App Store

These resellers handle payment processing, tax compliance, invoicing, and refunds under their own respective privacy policies. EWAS never receives, processes, or stores your credit card numbers, bank account details, or sensitive payment credentials.

4. Software Updates & Diagnostic Reports

Update Verification

The standalone version of CRAX Commander includes an integrated update mechanism (Sparkle) that periodically checks for software updates over encrypted HTTPS. This request transmits standard, non-identifying technical metadata (such as your current application version and macOS version) to confirm compatibility.

Optional Error Reports

If an unexpected error occurs, you may optionally choose to send a crash or diagnostic log to assist in resolving the issue. Transmitting diagnostic reports is entirely voluntary and initiated solely with your explicit consent.

5. Data Controller & GDPR Compliance

For users located in the European Economic Area (EEA), EWAS (Kraków, Poland) is the Data Controller under the General Data Protection Regulation (EU) 2016/679 (GDPR).

Our legal grounds for processing data under the GDPR are:

  • Performance of a Contract (Art. 6(1)(b) GDPR): To activate, validate, and manage your software license under the EULA.
  • Legitimate Interests (Art. 6(1)(f) GDPR): To ensure software integrity, prevent piracy and unauthorized activation, and defend against legal claims.
  • Legal Obligations (Art. 6(1)(c) GDPR): To fulfill statutory accounting and tax retention obligations where applicable.

Under the GDPR, you have the right to access, rectify, or request deletion of your personal data, the right to restrict or object to processing, and the right to lodge a complaint with a supervisory authority (in Poland: Prezes Urzędu Ochrony Danych Osobowych — PUODO).

6. Security of Data

We employ industry-standard technical and organizational security measures, including HTTPS/TLS encryption for all server communications, to protect data against unauthorized access or disclosure. However, no internet transmission or electronic storage method can be guaranteed to be 100% secure.

7. Children's Privacy

CRAX Commander and our website are not intended for or directed to individuals under the age of 16. We do not knowingly collect personal information from children.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our software, legal requirements, or operational practices. Any changes will be posted directly on this page with an updated “Effective date” at the top.

You are advised to review this Privacy Policy periodically. Modifications are effective immediately upon publication on this page.

9. Contact Us

If you have any questions or requests regarding this Privacy Policy or our privacy practices, please contact us: