This policy explains what personal data Sonant and this website process, who receives it, and how you can exercise your rights. Sonant is published by Penumbreal under the trade name Soluneal.
1. Controller
Soluneal is the trade name under which Penumbreal publishes its macOS apps. Penumbreal is a sole proprietorship (eenmanszaak) registered in the Netherlands under KvK number 42159345 (VAT identification number, btw-id, NL005545981B19), at De Nieuwe Erven 3, Unit 15248, 5431 NV Cuijk, The Netherlands. Penumbreal is the data controller for the processing described in this policy and can be reached at contact@penumbreal.com. Penumbreal is not required to appoint a data protection officer and has not done so.
2. Visiting this website
sonant.soluneal.com uses no tag managers, advertising pixels, session replay, heatmaps, or cookies. Your IP address is processed by Cloudflare's network to deliver the page; we do not receive it and it is not logged for our use.
Two scripts are loaded from outside this site: Cloudflare Web Analytics and the Setapp badge described below. All other resources, including fonts and animation code, are served from sonant.soluneal.com. Cloudflare Web Analytics measures page load performance and counts visits without cookies, without a client-side identifier, and without building a profile. Cloudflare does not use this data for its own purposes. Blocking the script does not affect the site.
The home page shows an "Available on Setapp" badge. Its script
is loaded from developer.setapp.com, so Setapp
receives your IP address, browser details, and the address of
this page when the page loads, as with any file requested from
another site. The script only displays the badge: it sets no
cookies and sends no data of its own. The badge is a partner
link. If you click it, you are taken to Setapp's website, which
sets its own cookies for 30 days so that a Setapp subscription
started there is attributed to us. We receive a payment from
Setapp for such referrals, but no information about you.
Blocking the script only hides the badge.
3. Recipients
We do not sell, rent, license, or otherwise share personal data with advertising networks, data brokers, social platforms, or AI training companies. We keep no customer database of our own; customer records are held by the services listed below.
- Cloudflare hosts this website and the app's update feed. It acts as a processor on our instructions under its privacy policy and its EU/UK data processing addendum, and does not use the data for its own marketing.
- Lemon Squeezy operates the store, the license service, and our product-update emails. It holds your order and, if you subscribed, your email address, as described in sections 4 and 5, under its privacy policy.
- Setapp (MacPaw Way Ltd., Limassol, Cyprus) sells and delivers the Setapp copy of Sonant. It holds that order, your Setapp account, and the usage signals its framework sends, as an independent controller under its privacy notice. It also serves the badge on the home page and operates the partner link behind it (section 2). Section 4 describes what we receive from Setapp.
The app also contacts a small number of services for lyrics, artwork, and updates. These requests contain information about the current track, not about you, and are described in sections 9 to 11.
4. Purchases
Purchases are handled by Lemon Squeezy, which sells Sonant as the Merchant of Record. At checkout it collects your name, email address, billing country, and payment details, and a VAT ID if you provide one. Payment details remain with Lemon Squeezy and its payment providers; we never see card numbers.
In our Lemon Squeezy dashboard we can see your name, email address, country, the order, and your license key with its activations. We use this information to deliver and activate the license, to handle support and refund requests, and to keep the records required by Dutch tax law, which is why purchase records are retained for seven years after the sale. Legal basis: performance of the contract with you, and our legal obligations for record keeping.
When you activate Sonant, the app sends your license key and your Mac's name (as shown in System Settings, for example "Ayşe's MacBook Air") to Lemon Squeezy's license service, so that activations can be counted against the five your license allows. Deactivating a Mac, in Settings or by emailing us, removes that entry.
Sonant first validates the key with that service, so a key for another product is rejected before an activation is used. Approximately every two weeks afterwards, it sends the key and this Mac's activation ID to confirm that the license is still valid. If your Mac has no name, it sends "Mac" instead. Entering the key that this Mac already uses checks the existing activation rather than adding another. When Sonant detects that its license record was copied from another Mac, for example by Migration Assistant, it activates the key on the new Mac in the same way. If the original Mac holds the last available activation, Sonant offers to move the license: after you confirm, it releases that Mac's entry and activates the new one.
Purchases through Setapp. If you buy Sonant on Setapp, the checkout, invoice, and refund are handled by Setapp and the paragraphs above do not apply: no license key is issued, nothing is sent to Lemon Squeezy, and we never see your payment details. We receive aggregate sales and usage figures for the app from Setapp. If you contact us, or Setapp forwards your request to us, we also receive your message and email address and keep them only for as long as the support case requires. The Setapp copy contains Setapp's framework, which signs you in with your Setapp account when the app starts, confirms the purchase, and reports that the app is in use so that Setapp can calculate our share. This traffic goes to Setapp, not to us, and contains your Setapp account details, not your listening activity. Setapp describes it in its own privacy notice.
5. Product-update emails
Order confirmations and license emails are transactional and are sent to every buyer. Other emails are sent only if you opted in, either at checkout or by subscribing later. The list is hosted and sent through Lemon Squeezy's email service. Emails are occasional (launches and significant updates), each contains an unsubscribe link, and unsubscribing does not affect your license. Legal basis: your consent, which you can withdraw at any time by unsubscribing or by emailing contact@penumbreal.com. Purchasing through Setapp does not subscribe you to our emails; any email from Setapp is sent by Setapp.
6. Your rights
Where the GDPR (EU/UK) or a comparable data protection law applies, you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate data.
- Erase your data.
- Withdraw consent at any time.
- Receive your data in a portable format.
- Object to or restrict processing.
- Lodge a complaint with a supervisory authority. Our lead authority is the Dutch Autoriteit Persoonsgegevens.
To exercise these rights, email contact@penumbreal.com. We respond within one month, as the GDPR requires. A request sent from the email address associated with your purchase is normally sufficient to identify you; we do not ask for a copy of an identity document. Erasure is subject to one limitation: purchase records that Dutch tax law requires us to keep are retained until the retention period ends, and payment records held by Lemon Squeezy are subject to its own policy.
7. Cookies and tracking
This website does not use cookies, localStorage, sessionStorage, or any other client-side storage, and does not use Google Analytics, Facebook Pixel, Plausible, or similar tools. The only measurement is the cookie-free Cloudflare Web Analytics described in section 2. The Setapp badge sets no cookies on this site; Setapp's cookies are set on setapp.com, and only if you click the badge.
8. Live visualizer (optional)
Sonant includes an optional live visualizer that makes the menu bar bars respond to the audio playing on your Mac. It is off by default and is enabled only when you choose "Allow" during setup or turn on Live audio capture under Settings → General → Audio Analysis.
When enabled, Sonant uses the macOS CoreAudio process tap (macOS 14.2 or later) to read your Mac's audio output in real time. macOS asks for the Microphone and System Audio Recording permissions before Sonant can use it. No audio is recorded, written to disk, or sent over the network. Samples are passed to a 1024-point FFT, reduced to four band amplitudes that drive the bars, and then discarded. Playback through your speakers is unaffected; the tap only reads the signal.
You can turn the live visualizer off at any time under Settings → General → Audio Analysis. When it is off, Sonant makes no audio capture calls and the bars use a synthetic animation.
9. Lyrics
When you open the Now Playing preview or enable the Current lyric line option on the widget, Sonant retrieves synced lyrics from lrclib.net, a free lyrics catalog that requires no account. The request contains the title, artist, and album of the current track. No install ID or account information is sent; lrclib.net receives your IP address as part of the connection, as with any internet request. Lyrics are cached in memory only and are discarded when you quit Sonant. If you do not use either feature, Sonant does not contact lrclib.net.
10. Album artwork
Music and Spotify normally provide the artwork for the current track directly. When Music does not, Sonant looks up the track on Apple's public iTunes Search API by artist and title and displays the returned cover. When Spotify is playing, the cover is downloaded from the artwork link Spotify provides. These requests contain only the artist and title (Apple) or the artwork link (Spotify), with no install ID or account information. Artwork is kept in memory only.
11. Software updates
Sonant checks for updates by requesting a signed update feed
from sonant.soluneal.com using the open-source
Sparkle framework. The request contains no install ID, account
information, or system profile, and Cloudflare handles it in
the same way as a visit to this website. The Setapp copy does
not include Sparkle; Setapp delivers its updates and receives
that request instead.
12. Data stored on your Mac
To manage the free trial and your license, Sonant keeps a small license record on your Mac: the trial start date, your license key and this Mac's Lemon Squeezy activation ID if you entered a key, the time of the last license check, and a hashed identifier of this Mac. The identifier is derived from the Mac's hardware UUID, or from a random ID that Sonant creates once if the UUID cannot be read. It allows Sonant to detect a record copied from another Mac and never leaves your Mac.
The record is stored in three locations, so that deleting one
does not reset the trial: Sonant's standard macOS preferences,
a hidden file .lcs in
~/Library/Application Support/Sonant, and a hidden
copy at ~/Library/Application Support/.sonant-state.
The preferences also contain your settings, your listening time
per artist for the last 90 days, the last 12 tracks played, and
the date you accepted the terms.
Sonant has a debug log that is off unless we ask you to enable
it while investigating a problem. While enabled, it is written
to ~/Library/Logs/Sonant/debug.log, which only
your user account can read. It may contain the titles and
artists of tracks you play, and it stays on your Mac unless you
send it to us.
To remove all of this data, first remove the license under
Settings → About while online, so that its activation
is released (or email us and we will release it). Then quit
Sonant and delete the app, the Sonant folder and
the .sonant-state file in
~/Library/Application Support, and the file
~/Library/Preferences/com.tbtechs.sonant.plist.
The Setapp copy does not keep a license record.
13. Children
Our products are not directed at children under 16, and we do not knowingly collect data from them. If you believe we have, please contact us and we will delete it without delay.
14. International transfers
Cloudflare operates a global network and Lemon Squeezy is based in the United States, so your data may be processed outside the EU/EEA. Both rely on Standard Contractual Clauses or an equivalent transfer mechanism under Chapter V of the GDPR. Setapp's operator, MacPaw Way Ltd., is established in Cyprus, within the EU; transfers within its group are covered by its privacy notice.
15. Changes to this policy
When we change how we handle personal data, we update the "Last updated" date at the top of this page. For material changes, we publish a notice on this page and in Sonant's release notes before the new policy takes effect.
16. Contact
Questions about this policy can be sent to contact@soluneal.com.
