No account, no analytics, no advertising, and nothing that follows you between visits. But it is no longer true to say nothing leaves your Mac, so this page lists exactly what does.
last updated 5 August 2026
Vivarium has no account system, sets no cookies, runs no analytics or advertising SDK, and never sends your videos, your library, or anything you make. Three things do reach a server, and only three: a crash report, feedback you type and send, and a count when the app is downloaded. None of them carries your name, your email, your IP address or any device identifier, and none of them can be tied back to you or joined to the others.
Everything else stays on your Mac, in
~/Library/Application Support/Vivarium/ and in your app
preferences: your imported videos and their thumbnails, the loop points you
set, your playlists and schedule, your licence key, your hue and speed
settings, and any feedback drafts you have written. Deleting the app and
that folder removes all of it.
If Vivarium or its wallpaper agent crashes, a report is written to disk and sent the next time the app starts — never at the moment of the crash, because doing work inside a dying process is how you lose the report and hang the machine.
A report contains: which of the two processes died, the signal or exception that killed it, its reason, the stack trace, the app version and build, your macOS version, whether the Mac is Apple silicon or Intel, and the two-letter country the request arrived from. That is the whole list.
Home directory paths are replaced with ~ before the
report is written to disk, so your username does not appear in a
file path even in a stack trace. There is no name, no email, no machine
identifier, no serial number, and no way to group two crashes as being from
the same Mac. Reports cannot be read back out by anyone visiting the site —
the database grants permission to add a crash report and no permission at
all to read one.
This is deliberately not Sentry or any other crash SDK. Those bring a vendor, an account, a network client that is not ours, and a payload that cannot be read before it leaves. This is one table and about a hundred lines of code, and it collects nothing a crash does not need.
The Feedback pane sends nothing until you press send. When you do, it transmits the topic you picked, the mood, the message you wrote, and — only if you tick the box — a diagnostics block that is shown to you verbatim beforehand so you can read every character before it goes. The country the request came from is recorded alongside it.
You are not asked for an email address and there is no field for one. If you type your contact details into the message, they are stored, because you put them there; leave them out and there is no way to reply to you, which is the trade.
If sending fails for any reason, the app opens a pre-filled mail draft instead, addressed to hello@getvivarium.app. That draft is yours — nothing is sent unless you send it.
When you download the app from this site, one row is recorded: which version, the country, and the referring page if your browser sent one. No IP address, no cookie, no identifier, and nothing that distinguishes you from the next person downloading the same build.
All three carry a two-letter country code. It is provided by Cloudflare, which derives it from the IP address of the request. The IP address itself is not stored by us — only the country it implies, which is kept so it is possible to tell whether a crash affects one region or everyone. Cloudflare, as the host, sees the IP address in the course of serving the request and keeps standard access logs under its own privacy policy.
The site is static and hosted on Cloudflare Pages. It sets no cookies and runs no analytics. One thing worth naming: it loads two typefaces from Google Fonts, which means Google receives a request from your browser when you visit. You can see this, and everything else the page loads, in your browser's network inspector.
[TO CONFIRM BEFORE SELLING — name the payment processor and link its privacy policy. The processor is the merchant of record and handles card details; Vivarium never receives or stores them. A licence key and the fact that it is valid are the only things that come back.]
Vivarium is not directed at children and collects nothing that identifies anyone, of any age.
Nothing collected identifies you, so there is no record of yours to retrieve, correct, export or delete — there is no key to look you up by. If you sent feedback and want it removed, write to hello@getvivarium.app and quote enough of it to find the row, and it will be deleted.
This page is updated before a change ships, not after, and the change is named in the release notes rather than made quietly. It last changed on 5 August 2026, when crash reporting was added and the feedback path moved from opening a GitHub issue to sending directly.
hello@getvivarium.app