Privacy Policy

Last updated: October 7, 2026

Overview

Tornade is a cross-platform local music player. We are committed to protecting your privacy.

Data Collection

Tornade does not collect any personal data, on any platform.

• No analytics or tracking
• No usage data sent to external servers
• No crash reports transmitted without your explicit consent
• No advertising identifiers used

Local Processing

All operations performed by Tornade happen entirely on your device:

• Music library scanning and indexing
• Audio playback
• Metadata reading (artist, album, track information)
• Artwork loading

No music files, metadata, or listening history ever leave your device.

Per-Platform Details

macOS — App Store

• Purchases: handled entirely by Apple’s StoreKit 2 framework. No payment data is processed by Tornade. Refer to Apple’s Privacy Policy for details.
• Updates: delivered through the Mac App Store — no external update service used.
• Network: used only for StoreKit purchase verification.

macOS — Direct Download

• License verification: your license key is validated against our server to confirm its validity. No personal information is transmitted — only the key itself.
• Updates: checked automatically via Sparkle, an open-source update framework. Only your macOS version and app version are sent to our update feed.
• Network: used only for license checks and update checks.

Windows & Linux

• License verification: same as macOS direct download — only the license key is transmitted.
• Updates: checked via our update feed. Only your OS version and app version are sent.
• Network: used only for license checks and update checks.

Terminal UI (TUI)

• No network access: the TUI version does not connect to any external service.
• No license system: the TUI is open-source and free to use.

Website Contact Form

This section only concerns the tornade.tf website. The Tornade app itself collects no personal data.

If you send us a message through the contact form on tornade.tf, we receive your name, email address and message, and use them only to answer you. The form is processed through the Sinra application platform at app.sinra.dev. Your data is not sold or shared with third parties for marketing purposes. To access, correct or delete your data, contact us through the same form.

Legal basis: our legitimate interest in answering the message you send us and in protecting the form from abuse (GDPR Article 6(1)(f)).

Spam protection: the form uses Cloudflare Turnstile, provided by Cloudflare, Inc., only on this contact form, only to prevent spam, and for no other purpose (no analytics, advertising or profiling). When the contact page loads, Cloudflare receives technical signals from your browser: your IP address, TLS fingerprint, User-Agent, and the site key and origin of the page. According to Cloudflare, Turnstile does not use cookies. Cloudflare acts as our processor for this verification, and as an independent controller to improve its bot detection. Your data may be processed outside the European Economic Area; see Cloudflare’s Turnstile privacy policy for details.

Data Retention

Since no personal data is collected, there is nothing to retain or delete.