LAUNCHING SOON BoltMate opens in the coming weeks. Join the waitlist to hear from us at launch.
BoltMate
Join the waitlist

PRIVACY

Privacy policy

Last updated 2026-08-02

Short version

BoltMate is a desktop utility that fans Logitech Bolt host-switch events across your devices and machines. The cross-machine sync is LAN-only — no host-switch event ever leaves your local network. We collect the minimum data needed to issue you a license and reply to your support requests.

What we collect

  • Email + account profile. When you sign in via Apple, Google, or a one-time email code, the identity provider gives us your verified email address and (optionally) your display name. We bind your BoltMate license to that email.
  • License + entitlement state. Your license is tied to you, not to any device — signing in is required for both the free trial and the paid license, and your entitlement is keyed to the stable directory identifier your sign-in provider gives us. Because BoltMate runs across several of your machines and syncs between them, the license has to follow your account, not a single computer. Each license row stores that identifier, your email (as a contact address), your tier (Trial / Boltmate), issue/expiry/refund timestamps, and — once you purchase — Stripe customer + checkout-session IDs.
  • Support submissions. When you write to [email protected] or use the in-app "Send logs" button, the email address you provided, your message, optional name, and any log bundle you attached are stored long enough to reply and resolve the issue.
  • Payment metadata. Card details never touch our servers. Stripe handles checkout end-to-end; we receive customer ID + payment intent ID, plus webhook events for completion and refunds.
  • Optional diagnostics (off by default). To find and fix crashes, the desktop app can send anonymous diagnostic events to Microsoft Azure Application Insights. This is disabled unless you turn it on during setup or in Settings, and you can turn it off again at any time. When enabled, an event carries only: app version, platform, CPU architecture, environment, code-signature status, a per-launch random session ID, and a salted, truncated hardware hash (a 12-character token, not your real hardware ID). Event bodies are limited to a fixed allow-list of names and numeric tokens — for example "a crash happened" (with a counter, but no crash text) or "a switch fanned out" (with a numeric slot index and a device count). It is used solely for debugging and reliability, never for advertising or profiling. See "What we do NOT collect" for the hard exclusions.

What we do NOT collect

  • Keystrokes, mouse movement, scroll, clicks. macOS calls the permission BoltMate needs "Input Monitoring," but we use it solely to read HID++ host-switch frames from the Bolt receiver. The app never sees what you type.
  • Website trackers. This website sets no cookies of its own and runs no analytics or third-party trackers — no Google Analytics, Plausible, Mixpanel, etc. Your sign-in token is held in your browser's session storage for the current tab only. Signing in redirects to Microsoft's identity service, which sets its own strictly-necessary cookies on its domain to keep you logged in — governed by Microsoft's privacy terms, not ours.
  • Anything sensitive in the optional diagnostics. Even when you opt in to app diagnostics (above), we never send what you type, your crash text or stack traces, your device names or serial numbers, your email or name, or your IP address. These exclusions are enforced in the app's code by an allow-list and automated checks — not just policy. We never sell diagnostic data or use it for advertising.
  • Host-switch event content. The cross-machine sync is LAN-only — UDP multicast + Bonjour-discovered TCP. No host-switch event is ever sent off your local network.

Where data lives

Account, license, and refresh-audit data live in Microsoft Azure Cosmos DB in the East US 2 region. Support log bundles you upload land in Azure Blob Storage in the same region with an automatic 30-day delete lifecycle. Email is sent via Resend. Authentication is brokered by Microsoft Entra External ID; your identity-provider credentials never touch us directly.

Sharing

We never sell, rent, or syndicate your data. The processors that see narrow slices of it are listed above (Microsoft Azure for storage + auth, Stripe for payments, Resend for email, Cloudflare for DNS + email routing). Each is bound by their own data-protection terms.

Your rights

You can request a copy of your license + account data or delete your account entirely by emailing [email protected] from the address on your account. We complete deletion requests within 30 days; the only data that survives is what we're required to keep for tax + accounting reasons (Stripe transaction records).

Contact

BoltMate is run by Jared Allen. Reach us at [email protected].