← Pokoe

Privacy Policy

Pokoe is a free macOS menu bar app that routes your media keys to the music player you choose, built by Stijn Hanegraaf (The Netherlands). Privacy is not a feature of Pokoe, it is the starting point. The app was designed to keep everything on your Mac and to collect nothing.

What data Pokoe collects

Nothing. Pokoe has no analytics, no telemetry, no crash reporting, no account, and no sign-up. Player detection scans your installed apps locally. Now playing metadata (track, artist, artwork) comes from macOS's own now playing service and never leaves your Mac. Pokoe keeps no history of what you play.

When Pokoe uses the network

Three narrow cases, none of which involve personal data:

The legal basis for these requests is legitimate interest (GDPR Article 6(1)(f)): they are required for the feature you asked for, and they are the minimum needed.

Permissions

Pokoe asks for one required macOS permission: Accessibility, which is what lets an app read media key presses. It cannot read your screen or your files with it. Some players are controlled through AppleScript, so macOS may also ask for a per player Automation permission the first time Pokoe talks to that player. If you allow it for a browser, Pokoe looks only for tabs on soundcloud.com and youtube.com, and that filtering happens inside the browser itself, so the addresses of your other tabs are never handed to Pokoe at all. Denying either never sends anything anywhere; the app simply does less until you change your mind.

Purchases

There are none. Pokoe is free, has no subscriptions, and is not distributed through the App Store. It ships from this website as a notarized, Developer ID signed download, so no payment processor or store account is involved at any point.

This website

This website uses Google Analytics 4 to understand visits, traffic sources, download-button clicks, other link clicks, CV openings, demo interactions, FAQ openings and scroll depth. Analytics loads automatically on public pages unless a supported browser privacy signal or an existing analytics opt-out is detected.

Google Analytics uses first-party cookies to recognise a browser and measure sessions and repeat visits. The site configures analytics cookies with a 180-day lifetime and disables automatic lifetime extension. Google Analytics event and user data has a 14-month retention setting; aggregate reports may be kept longer.

Advertising storage, advertising data use and ad personalisation are disabled. Google signals and user-provided data collection are off. We do not send email addresses, phone numbers, form contents, account IDs or other intentionally identifying details as event data. Query strings and fragments are removed, except for bounded campaign labels used to understand traffic sources. Google may derive device and approximate location information from standard requests.

The site respects Do Not Track, Global Privacy Control, Google's analytics opt-out flag and any saved refusal from its previous consent panel. You can use these browser controls or Google's Analytics opt-out browser add-on to prevent collection. See Google's privacy policy for its data handling.

A download event records a click on a download link. It does not confirm that a transfer finished or that an app was installed. Browser caching, blockers and network failures can affect measurement. Pokoe, Ember and Uang do not contain this website's analytics.

Google Search Console provides reports about this site's appearance in Google Search, including search terms, impressions and clicks. It does not require a visitor tracking script on this website. Umami is disconnected.

The website also keeps daily aggregate counts on its own backend for its reporting app. These cover public page and initial download requests, clicks, demo use, FAQ openings and scroll depth. The backend totals contain fixed categories without visitor IDs, stored IP addresses, browser fingerprints, full referral URLs or query strings, and are retained for up to 400 days. Do Not Track and Global Privacy Control suppress these counts too. Cloudflare continues hosting the site and processing ordinary requests, including downloads and update feeds, under its privacy policy. Google and Cloudflare may process information outside the EEA; their policies explain applicable safeguards.

Third party services

International data transfers

Pokoe itself transfers no data. Apple, Cloudflare, and Google may process requests outside the EEA under the safeguards described in their respective privacy policies.

Data retention

Pokoe retains no data about you. Your preferences (like which player you picked) live in a local settings file on your Mac and are deleted when you delete the app.

Your rights under the GDPR

You have the right to access, rectify, erase, restrict, object to, and port personal data, and to lodge a complaint with a supervisory authority (in the Netherlands: the Autoriteit Persoonsgegevens). In practice there is nothing to exercise these rights against, because Pokoe holds no personal data about you.

Children's privacy

Pokoe collects no data from anyone, including children under 16.

Changes to this policy

Updates will be posted at this URL with a new date below. If something material changes, it will be called out on the Pokoe page.

Contact

Questions about privacy or anything else: Email Stijn. Pokoe is made by one person, so your mail lands straight with the developer.

Last modified: September 11, 2026