Privacy policy.

Who is responsible

The controller of your personal data, in the sense of the GDPR, is the publisher of Toolnotch:

• Johann Desobry, Entrepreneur individuel (micro-entrepreneur), France · APE 6201Z, computer programming
• SIREN: 844 240 358
• Address: 6 rue Amelot, 75011 Paris, France
• VAT not applicable, article 293 B of the French General Tax Code
• Email: support@toolnotch.app

For anything about your data, write to support@toolnotch.app.

What stays on your Mac

These never leave your Mac, and nobody, including us, can see them:

• your clipboard history, pinned items, snippets and the Paste Stack;
• the text read in your screenshots and images, and the text ⇧⌘2 copies from your screen (read by macOS on your Mac);
• Bodybreak’s breaks, streaks and reports;
• your calendar, if you let Bodybreak read it to avoid breaks during meetings: it is read on your Mac, nothing is copied elsewhere;
• whether your microphone or camera is in use (to pause breaks during calls): Toolnotch never records or listens;
• your window layouts, workspaces and settings.

The app has no account, no cloud sync, no analytics and no crash reporting. When you write to us about a problem, we only see what you choose to put in your email.

What the app sends, and to whom

Licence activation and check: Polar

When you paste your licence key, and then about once a week in the background, Toolnotch checks the licence with Polar, the merchant of record that sold it. It sends the licence key, Toolnotch’s organisation ID at Polar, and your Mac’s name as the label of its seat (so you can recognise each Mac in Polar’s customer portal). Polar also sees your IP address, as with any connection. Without a connection, Toolnotch keeps working for up to 30 days, then asks you to reconnect.

Updates: toolnotch.app and download.toolnotch.app (Cloudflare)

Toolnotch checks for updates at toolnotch.app/appcast.xml and downloads them from download.toolnotch.app. Both are served by Cloudflare. These requests carry your IP address and a user agent with the Toolnotch and macOS versions. Automatic updates can be turned off in Settings.

Link previews: the site you copied

When you copy a link, Toolnotch can fetch that page’s title and icon to show a preview in your history. The request goes from your Mac straight to that site, which sees your IP address, as when you open the link in a browser. For YouTube, Vimeo and Loom links, Toolnotch asks the site’s public oEmbed service for the video’s title and picture instead. Links that look like they carry a key or a token are never fetched. Link previews can be turned off in Pasteback’s settings.

This website

• No cookies, no advertising and no tracking across sites.
• We count visits with Cloudflare Web Analytics, which is cookieless and builds no profile of you: a small script reports the page, the referring site, your country and load times, and we only see totals (page views, referrers, countries).
• If you arrive through a link with a tag, such as toolnotch.app/?ref=x-launch, the tag is kept in your browser for the visit (session storage) and passed to Polar’s checkout, so we know which post or campaign led to a sale. It names the campaign, not you.
• The colour you pick for Notchi is saved in your browser’s local storage (key notchi-accent), only on your device. Clear your browser data to remove it.
• The site is hosted by Cloudflare, Inc., which processes your IP address and request details to serve the pages and protect them from abuse, and keeps technical logs for a short time.
• The live “spots left” count asks our server for a number; it sends nothing about you.

Purchases

Polar (Polar Software Inc.) sells Toolnotch as merchant of record, and processes payments with Stripe. They collect what a purchase needs: your name, email address, billing country and address, payment details, IP address and tax information. We receive your name, email address, country and order details (with the campaign tag, if you came through one) from Polar, to send your licence, answer you and keep our accounting records. We never see your full card details. Polar’s and Stripe’s own privacy policies apply to the data they process as controllers.

Support emails

When you write to support@toolnotch.app, we receive your email address and what you write. Mail for toolnotch.app is routed by Cloudflare to our mailbox, hosted by Google (Gmail). We use it only to answer you.

Why we may use your data (legal bases)

• To sell and deliver your licence, check it, update the app and answer you: performance of the contract (GDPR art. 6(1)(b)).
• To keep accounting and tax records: legal obligation (art. 6(1)(c)).
• To serve, protect and measure the website, and to know which campaign led to a sale: our legitimate interest in a working, secure site and in knowing what brings buyers (art. 6(1)(f)).
• Link previews run because you copy a link with the feature turned on; you can turn it off at any time.

Processors and transfers outside the EU

We work with Cloudflare, Inc. (hosting, web analytics, email routing, downloads), Polar Software Inc. (sales, licences), Stripe (payments, through Polar) and Google LLC (our mailbox). They are based in the United States. Transfers rely on the EU–US Data Privacy Framework where the company is certified, and otherwise on the European Commission’s Standard Contractual Clauses.

How long we keep it

• Orders and invoices: 10 years, as French accounting law requires.
• Licence and seat records at Polar: as long as your licence exists.
• Support emails: up to 3 years after our last exchange, unless you ask us to delete them sooner.
• Website and download logs at Cloudflare: a short time, under Cloudflare’s own retention rules.
• Everything on your Mac: until you delete it (the support page explains how).

Your rights

You can ask to access, correct or delete your personal data, to restrict or object to its use, and to receive it in a portable format. Write to support@toolnotch.app; we answer within one month. You can also complain to the CNIL, the French data protection authority (cnil.fr), or to the authority of the EU country where you live.

If you live in the United States

We do not sell or share your personal information, and we do not use it for targeted advertising. The categories we collect are those above: identifiers (name, email, IP address), commercial information (orders) and the licence key. Wherever you live, you can ask to know, correct or delete what we hold about you by writing to support@toolnotch.app, and we will not treat you differently for asking.

Children

Toolnotch is not directed at children under 16, and we do not knowingly collect their data.

Changes

If this policy changes, the new version is posted here with a new date. If a change affects how the app handles your data, the app’s release notes say so.