1. Short version
Purchase and license delivery happen on our servers (Stripe, email, Cloudflare). The Wraith app itself runs on your PC. Provider API keys stay in Windows Credential Manager. We do not sell your personal information.
2. What we collect when you buy
- Payment. Stripe processes the card. We receive payment metadata (email, amount, checkout session / payment ids). We do not store full card numbers.
- License records. Email, plan, device limit, hashed license key, activation device ids, fulfillment and refund/revoke events. Stored in Cloudflare D1. We cannot later recover a plaintext key from the server once delivery is complete.
- Email. We send the key and private download link through Resend from licenses@rayth.dev. Support mail uses support@rayth.dev (Cloudflare Email Routing on rayth.dev).
- Downloads and updates. Authorized downloads go through our Worker from a private bucket. Update checks, when enabled, send a short-lived license-gated token — not your API keys.
3. What stays on your computer
Settings, memory notes, logs, WebView data, and license state live under %LOCALAPPDATA%\Wraith. Project files stay in the folders you open. Voice, when you use on-device speech, is processed locally. Optional cloud voice (for example GPT Realtime or Grok Voice) uses the provider key you saved and that vendor’s privacy terms.
If you create a diagnostic report, it is generated on your machine for you to copy. We only see it if you send it to support.
4. Who we share with
Processors we need to run the product: Stripe (payments), Resend (transactional email), Cloudflare (site, licensing Worker, D1, KV, R2). Discord is optional and separate if you join the community. We do not sell lists of buyers. We may disclose information if required by law or to stop fraud / abuse of the licensing system.
5. Cookies and the website
The marketing site is a static Worker site. The purchase button goes to Stripe. We do not run a third-party ad tracker on rayth.dev as part of this product. Stripe and Cloudflare may set their own cookies on their surfaces.
6. Retention
License and payment correlation records are kept while the license may need support, refund, or revocation. Pending email ciphertext is retained only long enough to retry delivery, then purged. You can ask us to deactivate a device or replace a lost key after we verify control of the purchase email.
7. Your choices
Do not buy if you do not want Stripe and email involved. You can deactivate a device from the app. You can ask support to revoke/replace a license you own. Uninstalling Wraith does not automatically erase %LOCALAPPDATA%\Wraith — delete that folder yourself if you want local data gone.
8. Children
Wraith is not directed at children under 16. Do not buy or activate a license for a child as the named customer.
9. Contact
Privacy questions: support@rayth.dev with subject line “privacy”.