1. Scope
This notice applies to information processing when you visit the DebugMac website, create or use a console account, place a cloud Mac order, choose a node region, request delivery of a dedicated physical node, or receive pre-sales or ongoing support. Services are delivered on a dedicated Apple Silicon physical node assigned to your order, not a virtual machine.
Website activity includes page requests, security protection, language and interface preferences, referring pages, and necessary technical logs. Console activity includes account verification, order configuration, renewal status, ticket records, access credential issuance status, and node operation records.
Inquiries sent to support@debugmac.com and tickets submitted after signing in to the console are also covered by this notice. Information you provide directly in a third-party payment interface is handled by the relevant payment processor under its own rules; DebugMac processes only the information necessary to verify the order and provide the service.
2. Information Categories
Account and contact information may include your email address, account identifier, verification status, language preference, and contact details you choose to provide. We do not require identity information unrelated to order fulfillment, nor do we make nonessential fields a condition of receiving basic services.
Order and node information may include the order identifier, Debug M4 configuration, rental term, additional storage, Thunderbolt 5 link option, selected node region, amount, payment status, activation status, and renewal records. Available regions include Singapore, Japan (Tokyo), South Korea (Seoul), Hong Kong, and the western United States.
Support and security information may include ticket content, redacted logs, incident times, host fingerprint verification records, SSH public keys, credential issuance and revocation status, login times, request origin, browser and device type, network address, security event identifiers, and website technical logs. Please do not submit unrelated keys, complete credentials, or other sensitive content in inquiries or tickets.
3. Purposes and Legal Basis
We use account, order, configuration, and node selection information to confirm purchase intent, verify the USD amount due, assign a dedicated physical node, issue access details, process renewals, and send order-related notices. These activities are necessary to provide the service and respond to your requests.
We use login records, host fingerprint verification results, access issuance status, and necessary security logs to detect unusual requests, protect accounts, investigate unauthorized access, and rotate or revoke credentials. To troubleshoot connection, build, storage, or network issues, we may analyze your redacted logs together with the order identifier, node region, and incident time.
We may also process limited information to meet applicable compliance obligations, maintain necessary business records, prevent abuse, and improve service reliability. Data used for service improvement is, wherever possible, aggregated or de-identified and limited to what is needed to answer a specific engineering question.
4. Payment Information
All orders are settled in US dollars (USD). Available payment methods are limited to USDT-TRC20 and Visa, Mastercard, and Amex processed by Stripe; the gateway available at checkout is based on the console's real-time response.
DebugMac processes the order identifier, amount due, payment method category, transaction status, necessary transaction reference identifiers, and reconciliation results to confirm payment, deliver nodes, process renewals, and investigate billing issues. We do not retain full card numbers, security codes, or payment account authentication credentials for service delivery.
The payment processor is responsible for information collected directly through its payment interface, transaction authorization, risk checks, and payment network interactions. DebugMac and the payment processor exchange only the information necessary to complete the transaction, verify status, process refunds, or meet applicable recordkeeping obligations.
5. Sharing and Regional Processing
To deliver your selected node, we may process information necessary for orders, node assignment, and access issuance in Singapore, Japan (Tokyo), South Korea (Seoul), Hong Kong, or the western United States. You choose the node region when placing an order; actual availability is based on the console's real-time response.
To complete payments, provide infrastructure, send necessary service emails, maintain security records, or respond to support requests, we may provide limited information to service providers performing those functions. Recipients may process the data only for the agreed purposes and within applicable access and confidentiality requirements.
Regional information transfers follow the principles of purpose limitation, data minimization, controlled access, and transmission protection. Except where necessary to meet legal obligations, protect users and infrastructure, or fulfill your explicit request, we do not expand sharing or sell personal information.
6. Retention and Deletion
Account details are generally retained while the account is active. After an account is closed, we determine the retention period based on open orders, billing reconciliation, security investigations, and applicable recordkeeping obligations. Order and payment status records are retained for as long as needed to perform the agreement, reconcile finances, handle disputes, and meet legal obligations.
Support records are retained based on whether the issue is resolved, whether further troubleshooting requires reference to them, and whether they relate to a security incident. Access security logs are retained for a limited period needed to detect anomalies, investigate incidents, and protect infrastructure, with access restricted through permission controls.
Node rental data is handled in stages during delivery, operation, user export, rental expiration, and access recovery. Once the retention purpose is fulfilled, information is deleted, de-identified, or placed in a controlled deletion queue; copies in backups leave active use according to the established rotation cycle, except where records must be retained by law.
7. Your Rights and Requests
Depending on the rules that apply to you, you may request access to account-related information, correction of inaccurate data, deletion of information that is no longer needed, restriction of specific processing, or object to processing based on a particular legal basis. Some requests may be reasonably limited by order fulfillment, security records, legal obligations, or the rights of others.
You can email support@debugmac.com or submit a ticket through the console. Include your account email, relevant order identifier, specific right involved, scope of the information, and helpful context for verification. Do not send passwords, private keys, or complete payment credentials.
To prevent impersonation and unauthorized access to or changes in data, we may verify your identity through your account email, console session, order information, or another reasonable method. After verification, we will explain the outcome; if a request cannot be fulfilled in full, we will also explain the applicable limitation and possible next steps.
8. Updates and Contact
The current version of this notice is 1.0 and takes effect on September 1, 2026. We may update this notice when service processes, payment arrangements, node delivery methods, technical measures, or applicable rules change, and will publish the version and effective date on this page.
If an update significantly affects information categories, processing purposes, sharing, or your rights, we will provide reasonable notice through the website, console notifications, or your account email. Requests for privacy, security, compliance documents, and data rights must be sent to support@debugmac.com or submitted through a console ticket.
This notice and related processing are governed by the laws of the jurisdiction where the platform operator is based. Any dispute arising from this notice that cannot be resolved through communication will be handled by a court with jurisdiction in that jurisdiction.