What Quay collects, what it doesn't.

Short version

• If you have Pro or Pro Plus, Quay checks your license with our server every 30 minutes while it is open. The Free tier never contacts our servers on its own: if you have never activated a license, there is no license check. That check sends only your activation token, with no query content, schema names or usage data. When you activate a license, your license key, a hashed device fingerprint and the device name are sent to our server. Your database contents are never sent to us. Beyond that, data leaves your machine only if you turn on Pro Plus team sync yourself (encrypted queries and connection profiles, to our server), cloud backup (to your own bucket) or the AI assistant (to the provider, with your API key). Quay is a desktop app — every database connection runs locally over your own network.
• We don't run analytics, telemetry, or usage tracking inside the app. Zero phone-home for behavior.
• If you buy a paid plan, our license server records the bare minimum needed to verify your subscription: license id, device fingerprint, and tier. If you use team sync, the server also stores an encrypted blob of connection profiles or query history that only your team passphrase can decrypt.
• Payment, billing, and tax handling are run by Polar as merchant of record. Their privacy policy applies to anything billing-related.

What Quay collects

Free tier

Nothing. The Free build of Quay does not contact any Quay-controlled server. Marketing-site visits and feedback submissions are the only points where your information could reach us, and both are explicit user actions.

Paid tiers (Pro, Pro Plus)

When you activate a license, the app sends one request to license.quay.uncle-z.com containing:

• Your license key (the one we emailed when you bought)
• A device fingerprint — SHA-256 hash of your hostname, OS family, and a stable hardware UUID. This is irreversible; we cannot recover the original values from the hash.
• A device name you chose at activation, so you can identify it in the device list

The Free tier never contacts our servers on its own. Once you activate Pro or Pro Plus, the app re-checks the license with that server a few seconds after launch and then every 30 minutes while Quay is open. Each check sends only your activation token. If our server is unreachable, the app keeps your existing license state, so an outage on our side doesn't block your work.

Pro Plus team sync (opt-in)

Team sync is off until you use it. When you press push or pull in the Pro Plus panel, Quay encrypts your connection profiles or query history on your machine with your team passphrase and uploads the encrypted blob to license.quay.uncle-z.com. Only ciphertext leaves your device; without your team passphrase, our server cannot read it. Nothing syncs automatically.

Marketing site (this page)

Standard server access logs (IP, user agent, page path, timestamp) and Umami, a self-hosted, cookie-free analytics tool that counts page visits and clicks on download, pricing, account and docs links. No third-party trackers, no cookies set by us. The waitlist form, when used, transmits the email you typed to our ingest service.

What we explicitly never collect

Never collected in readable form. The only exception is the encrypted team-sync blobs described above.

• Database queries, schemas, table or column names, or row contents
• Connection strings, credentials, or SSH keys
• Files you back up, restore, or import
• Click streams (other than the button events above), mouse movement, or session recording
• Crash reports — Quay does not auto-report crashes. A report leaves your machine only when you click "Send report" or send from the feedback form. It can include the error's stack trace, the current screen, the app version, OS platform, browser user agent, language and time, plus any files you attach. You can untick "Include diagnostic info (Quay version, OS, time)" in the feedback form.

AI features (Pro Plus, opt-in)

If you enable the AI assistant on Pro Plus and configure your own API key (OpenAI or Anthropic), the queries you send to it leave your machine to whichever provider you chose. Quay does not see those queries, does not log them, does not relay them through our servers. The AI feature is off by default and ships with non-AI deterministic fallbacks for everything it touches.

Third parties we use

• Polar — merchant of record for payments. Sees your billing information; does not see anything inside Quay.
• payment.uncle-z.com gateway — thin signing proxy between Quay and Polar. Holds the Polar API key so it isn't shipped in the desktop binary; sees the same checkout fields Polar does.
• SMTP from quay@uncle-z.com — sends license keys and account emails. We host this ourselves; no third-party email vendor reads your account mail.
• dl.quay.toko.center — installer downloads (CDN). Sees your IP address and the file you download.
• Your own Amazon S3-compatible, Cloudflare R2, or Google Cloud Storage bucket (cloud backup, Pro Plus) — data goes from your machine straight to the bucket you configure. Quay does not receive it. For Google Cloud Storage, Google's token endpoint exchanges your service-account key for an access token.
• Umami (self-hosted) — We run Umami on our own server, a cookie-free analytics tool, to count page visits and these events on this site: views of the downloads page, download button clicks (operating system and version), pricing plan button clicks (plan name), clicks to the account portal, and clicks to the docs. On the account portal (account.quay.uncle-z.com) it also counts three events: account created, checkout started (plan name), and payment confirmed (plan name and the Polar payment id, so we can match the event to the Polar order).
• Google Ads conversion measurement (only if you accept) — If we run Google Ads, the account portal shows a consent banner. Only after you press Accept do we load Google's tag, which reports a signup or purchase conversion to Google. If you decline or ignore the banner, nothing from Google loads. You can change your choice by clearing this site's local storage.

How long we keep data

• License and device records: while the license is active and until you ask for deletion.
• Web and API server access logs: up to 30 days, then deleted.
• Team-sync blobs (end-to-end encrypted): each upload replaces the previous one; kept until you ask us to delete them.

Your rights

You can export, correct, or delete the personal data we have about you (basically: your license + device list) at any time by emailing quay@uncle-z.com. We respond within 30 days. Deleting your account in the account portal removes your login and sessions; your license and device records stay linked to your purchase. To delete those too, email us: we remove your license, device fingerprints and any team-sync blobs from our database within 30 days, and this cannot be undone.

Contact

Controller: Zaid Yasyaf, sole proprietor operating as Quay, quay@uncle-z.com.

Privacy questions: quay@uncle-z.com.