Your view.
Your space.

In short.

Seasill does no behavioural tracking and uses no analytics, in the app or on this site. The app contacts Seasill only to check your licence and to load the catalogue. Your library stays on your computer.

“Seasill”, “we” and “us” mean [Placeholder: seller’s legal name], of [Placeholder: seller’s registered address], which is responsible for the information described here.

The desktop app.

To check your licence — when you sign in and activate a computer, and from time to time after that — the app sends Seasill your account’s sign-in, a one-way fingerprint of the computer (made from its hardware identifier, which itself never leaves the computer), the computer’s name and platform, and the app’s version. What comes back is a signed statement of your plan, which the app keeps in your system’s secure storage: the Keychain on the Mac, Windows’ data protection on Windows.

To load the catalogue — when you browse, search or save a wallpaper — the app asks Seasill’s catalogue for it. Saving sends your plan’s signed statement with the request, and on Free, Seasill counts which catalogue wallpapers your account has downloaded in the last 30 days. To show which wallpapers in your library came from the catalogue, the app sends Seasill a one-way fingerprint (a SHA-256 hash) of each video in your library, once; the video, its name and its contents never leave your computer.

The app sends no usage analytics and nothing about what is on your screen. It contacts another service only when you ask it to: a link you paste is fetched from its own site, and a YouTube link goes to YouTube.

Your account.

A Seasill account holds your email address; your password, stored only as a salted one-way hash (Argon2id); whether your email is verified; your plan, its status, and its trial and renewal dates; the computers activated on it — each one’s name, platform, app version, when it was activated and last seen, and its one-way fingerprint; your sign-in sessions, stored as hashes; failed sign-in attempts, so the account can be protected from guessing; on Free, the catalogue wallpapers downloaded in the last 30 days; and a record of changes to your plan, saying who made each one and when.

Email.

We send the email your account needs — confirming your address, resetting your password, and notices about your plan — and nothing else unless you ask for it. The waitlist is double opt-in: you are on it only after you confirm from the email we send, and every email it sends has a one-click unsubscribe.

This website.

This site uses no analytics and no advertising trackers, and runs no other company’s scripts: its fonts and scripts are served from seasill.com. The catalogue’s pictures and previews come from Seasill’s own storage, which our hosting provider runs, and the live catalogue and your account pages talk to Seasill’s service at api.seasill.com. Every request your browser makes reaches the server that answers it with standard information, such as your IP address and browser headers.

Signing in on this site sets one essential cookie, which keeps you signed in for up to 30 days; it is sent only to Seasill’s account service, and the page’s scripts cannot read it. A few small things are kept in your browser’s own storage: whether the site’s sound is on, whether you are signed in (a yes or a no, not who you are), and a plan you chose before making an account. The browser demo keeps its preferences and its pretend library there too. Clearing this site’s data removes all of them.

When you arrive from a link with a campaign code (for example ?ref=…), or tell us where you heard about Seasill, we add one to a daily total for that code. The code is never stored with your email or your account, and we use no cookies or device storage for it.

Payments.

Sales are not open yet. When they are, payments will be handled by our payment provider, which receives your card details directly; we never receive or store your full card number. We keep the records of your plan and its payments that the law requires.

Server logs.

Seasill’s service logs each request: its method, its path, its status, how long it took and its size, and at most your account’s public id — never your email address, password, tokens or cookies. The proxy in front of the service also records the IP address each request came from and the full address it asked for. Requests are counted per IP address, in memory only, to limit abuse. Logs are kept for a short time, for security and to fix faults, and then deleted: [Placeholder: log retention period].

Where it is kept.

Seasill’s servers are in the United States. A small number of service providers help run Seasill — hosting and storage, email delivery and, once sales open, payments — and they handle information only to provide that service to us.

Your choices.

Your account page shows your plan and your computers; you can remove a computer there, and delete your account with your password. A paid plan that is still running must be cancelled first. Deleting the account removes it, its sign-ins and its computers from Seasill’s service; nightly backups hold a copy until they are replaced [Placeholder: backup retention period]. You can also write to us to ask for a copy of what your account holds, or to have it corrected or deleted.

Changes.

If we change this policy in a way that matters, we will say so here, and tell account holders by email before the change takes effect.

Contact.

Questions about privacy: support@seasill.com, or by post to [Placeholder: seller’s legal name and postal address].