Privacy policy

In short

The SQLAtlas app collects nothing. It has no analytics, advertising or tracking code and no account, and it does not send me any information about you, your computer, your databases or how you use it. The only exceptions are buying Pro and, on Windows and Linux, activating a licence, described below.

Who is responsible

Nicholas Xerri, an independent software developer established in Malta ("I", "me"), is the controller for this website, support email and licence records. Contact: support@sqlatlas.eu. Post: P.O. Box 3, Mellieħa Post Office, Triq il-Madonna ta' Fatima, Mellieħa, Malta.

The app

Connection details, settings, saved queries and history are stored only on your device. Passwords and other secrets are stored only in your system's keychain (macOS Keychain, Windows Credential Manager or the Linux Secret Service). Data you query goes directly between your device and the database and SSH servers you choose. I never receive any of it.

Optional features you control.

• AI assistant: off by default. If you turn it on and approve a request, that request goes either to a model running on your own computer or to Anthropic using your own API key, under your own agreement with Anthropic. Literal values are removed by default and you see the full request before it is sent. I never receive it.
• Microsoft Entra sign-in: if you choose it for a SQL Server connection, you sign in with Microsoft in your browser, under Microsoft's terms. Your password never passes through SQLAtlas.
• Touch ID: if you turn it on, macOS checks your fingerprint. SQLAtlas only learns whether the check succeeded.

Purchases

Mac (App Store). Apple processes your purchase under Apple's privacy policy. I receive only Apple's sales and financial reports, which do not identify you. The app checks your purchase on your device with Apple; nothing is sent to me.

Windows and Linux. Lemon Squeezy (Lemon Squeezy LLC), the merchant of record, processes your order and payment under its own privacy policy, and gives me the order details needed to deliver and support your licence: your name, email address, country, order number and licence key.

Licence activation (Windows and Linux only). When you activate or deactivate a licence, the app sends the licence key, a salted hash of a random installation identifier and the app version to the SQLAtlas licensing service, which I run. It checks the key with Lemon Squeezy and keeps the licence status, the order details above and, for each activated computer, that hashed identifier, so a licence can be used on a limited number of computers. A weekly licence check is off by default; if you turn it on in Settings › Licence, it sends the same three items. No hardware identifiers, usage data or database information are ever sent. Like any web server, the licensing service sees your IP address while it answers.

Legal basis: performance of a contract (GDPR Art. 6(1)(b)). Order and licence records are kept for as long as the licence exists and tax law requires.

Support email

If you email me, I use your message and address only to answer you, and delete the conversation 24 months after it ends unless the law requires otherwise. Legal basis: your request (Art. 6(1)(b)) and my legitimate interest in answering (Art. 6(1)(f)). Email to sqlatlas.eu addresses is forwarded by Cloudflare Email Routing.

Support report. The app can build a support report for you (Settings › Help). You see the full text before anything leaves your computer, and it is sent only if you email or share it yourself; the app never sends it and makes no network request for it. It contains the app version and build, operating system and version, processor type, free storage rounded to about 10 GB, your edition (Free or Pro, and the store), your display and privacy settings, and up to 20 recent error codes (such as TLS/mssql) with times rounded to the hour. It never contains your data, connection names, hosts, ports, user names, database or table names, SQL, file paths, counts, passwords, keys, licence keys or installation ids. If you send it, I treat it like the rest of your email.

This website

sqlatlas.eu sets no cookies, stores nothing on your device, runs no analytics and loads nothing from other servers. It is served by Cloudflare, which processes technical data such as IP addresses to deliver the pages and protect them from attacks; I see only aggregate counts, such as the number of requests. Legal basis: legitimate interest in a secure website (Art. 6(1)(f)). Cloudflare's processing is covered by its data processing addendum.

Your rights

You can ask for access, correction, deletion, restriction or portability of your data, or object to processing, by emailing support@sqlatlas.eu. You can complain to Malta's supervisory authority, the Information and Data Protection Commissioner (IDPC, idpc.org.mt), or to the authority where you live.

Children

SQLAtlas is a developer tool and is not directed at children.

Changes

Changes are published on this page with a new date.