Last updated 6 September 2026
Lathe reads your disks and makes no network request of its own accord. It never contacts us about you. This page is short because there is very little to tell you.
Lathe has no account, no sign-in, no analytics, no telemetry and no crash reporting. It does not send us your music, your library, your file names, your device serial numbers, or the fact that you ran it. There is no server of ours for it to send anything to.
Your licence is a signed file on your own Mac. It is checked on your machine, offline. Nothing about verifying it involves contacting us.
Both are things you ask for, and neither sends us information about you or your library. There is no third.
There is a second connection to that same server, and it is worth naming because it surprises people. A home server usually signs its own certificate, so Lathe opens a TLS handshake to read that certificate and show you its fingerprint before you decide to trust it. The handshake sends no request — no password, no query, no data of any kind. It exists so that a different certificate later will stop and ask you again.
The request necessarily reveals your IP address and the version you are running, as any web request does. It carries nothing else — no identifier, no licence, no email, and nothing about your library, because Lathe collects none of those to send.
A previous version of this page listed a third: fetching cover artwork. Lathe has never done that — there is no artwork provider and no code to reach one. The line described something the app did not do, and it is removed rather than left standing.
lathe-app.com is served through Cloudflare, which processes standard request data such as IP addresses in order to deliver the site and protect it from abuse. We run no analytics, no advertising and no tracking cookies. Nothing here follows you elsewhere.
Paddle.com is the merchant of record for every purchase. Paddle collects and processes your payment details, billing address, and the tax information required for the sale. We never see your card number. Paddle’s handling of that data is governed by Paddle’s own privacy policy.
From a completed purchase, we receive and store:
This is held in Cloudflare’s key-value storage. We keep it for one reason: so that when you lose your licence, we can send it to you again without asking you to prove you paid. That is a support obligation, not a marketing database.
Your licence email is delivered by Resend, which processes your email address in order to send it.
Email to support@lathe-app.com or hello@lathe-app.com reaches a mailbox hosted by Fastmail. We keep correspondence so we can remember what we told you last time.
Purchase records are kept while your licence is one we would reissue, and for as long as tax and accounting law requires us to keep records of the sale. Support email is kept until it stops being useful.
Wherever you live, you can ask us what we hold about you, ask us to correct it, or ask us to delete it. Write to support@lathe-app.com and we will do it.
⚠️ One honest consequence: if you ask us to delete your purchase record, we lose the ability to reissue your licence. Keep your licence file safe if you make that request. For payment data held by Paddle, requests go to Paddle, since they are the controller of it.
Lathe is not directed at children and we do not knowingly collect anything from them.
If this policy changes, the date at the top changes. If a change ever meant collecting something new, we would say so plainly rather than quietly widening a sentence.
Lathe Software LLC
Kansas, United States · Business Entity ID 10087878
support@lathe-app.com