Privacy

Effective · Dmytro Virych, City, Country

NotchClip collects as little as it can work with: your email address if you give it, what a purchase and a licence check need, and, only if you say yes, visit statistics. Your clipboard never leaves your Mac. Nothing is sold, and nothing is used for advertising.

Written in plain language so it can be read rather than agreed to unread. It describes how NotchClip actually works today — but it is a starting point, not legal advice. Have a lawyer review it before you take live payments.

Who is responsible

The controller of your data is Dmytro Virych, Street and number, postcode and city, country (full details on the legal notice). Write to hello@notchclip.buildmac.app about anything on this page.

What we use, why, and for how long

  • Joining the list. If you ask to hear when NotchClip goes on sale, we send one email to confirm the address. Only when you click its link is the address kept, to tell you about the sale and new versions. Basis: your consent (GDPR art. 6(1)(a)). Kept: until you unsubscribe, through the link in every email or by writing to us. An address that is never confirmed is not kept.
  • Buying. Creem takes the payment as merchant of record, so it collects your name, email, billing address and payment details under its own privacy policy, as an independent controller. We receive the order: your email, what you bought and what you paid. We use it to send your licence key and receipt, to answer a lost-key request, and to issue refunds. We never see a card number. Basis: performing the contract (art. 6(1)(b)), and tax law for the records (art. 6(1)(c)). Kept: as long as tax law requires, which is up to ten years in some countries. The records are held by Creem.
  • Licence checks from the app (details below). The licence key, an activation id and your Mac’s name pass through this site to Creem, which stores the activation. Our own logs record only a short one-way hash of the key. Basis: performing the contract (art. 6(1)(b)). Kept: the activation until you deactivate that Mac or ask us to remove it.
  • Visit statistics, only if you accept the analytics cookie. Page views, referrer, rough country and browser, tied to a random visitor identifier rather than to your name. If you then buy, that identifier and the order number are sent to the analytics provider, so we can see which page led to a sale. Your email and name are not. Basis: your consent (art. 6(1)(a)), which you can withdraw at any time under Cookie settings in the footer. Kept: by the analytics provider, as aggregate statistics.
  • Keeping the site running. Like every website, our host receives your IP address, browser and the page requested with every visit and every request from the app, and keeps them briefly in its logs to deliver pages and stop abuse. Our own log lines never contain an email address or a licence key, only short hashes of them. Basis: our legitimate interest in a working, secure site (art. 6(1)(f)). Kept: no longer than 30 days.

You never have to give us anything. Without an email address we cannot deliver a purchase, and without a licence check the app cannot confirm its activation. Everything else is optional. No decision about you is made by automated means.

Cookies

Only when you say yes. The first time you visit, a bar at the bottom of the page asks whether we may set analytics cookies (the provider’s cookies whose names begin datafast_), which identify a returning browser so that a person reading three pages is counted once. Until you accept, the analytics script is not loaded at all, and neither is the live visitor chart on the home page, which comes from the same provider. Declining, or ignoring the question, changes nothing else about the site.

A second, strictly necessary cookie, analytics_consent, remembers your answer for six months so we do not ask on every page. You can change your mind at any time with Cookie settings in the footer. Taking a yes back deletes the analytics cookies.

What the app sends

  • A license check, about once a week: your license key, an identifier for this activation, and your Mac’s name as shown in System Settings, so you can tell your activations apart. That name often includes your own. It goes to this site, which passes it to Creem.
  • A request for prices, so the purchase screen can show them. From version 1.0.2 it is made only while NotchClip is not yet activated; earlier versions ask at every launch. It carries nothing but the request itself.
  • An update check, if you allowed it when first asked (you can change that in Settings): a request for the list of releases, carrying the app’s version. When an update is offered, its release notes are loaded from this site. When you install one, it downloads from GitHub, which hosts the files and so sees your IP address.

Every request, like any connection on the internet, shows your IP address to the server it reaches. Nothing else leaves your Mac. NotchClip never uploads your clipboard, your files, their names, or anything about what you do with it.

Your clipboard history

The history is stored only on your Mac, in NotchClip’s folder inside your user Library. From version 1.0.2 that folder is readable only by your user account and is left out of Time Machine backups. Anything a password manager or an app marks as private is never saved, and neither is anything from an app on the ignore list. Settings can clear the history, and from version 1.0.2 erase all of it, pinned clips included. Deleting the app leaves the folder in place, so erase the history first if you want nothing left behind.

Who else receives any of this

Only the providers that do a job for us, each seeing only what that job needs. Nothing is sold, rented or shared with anyone for advertising.

  • Creem (creem.io): payments, invoices and licence activations, as merchant of record.
  • Vercel (USA): hosts this site and the routes the app talks to.
  • Resend (USA): sends receipts and list emails, and holds the list.
  • DataFast: visit statistics, only with your consent.
  • GitHub (USA): hosts the app’s download files.

Where a provider processes data outside the EU and the UK, the transfer relies on an adequacy decision, such as the EU–US Data Privacy Framework for a certified provider, or on the European Commission’s standard contractual clauses. Write to us for a copy of the safeguard that applies.

Your rights

You can ask us for a copy of the data we hold about you, have it corrected or deleted, restrict how we use it, receive it in a portable format, and object to our use of it. Where we rely on your consent, you can withdraw it at any time. That does not make what we did before unlawful. Write to hello@notchclip.buildmac.app. We answer within a month and never ask why. Records of a completed purchase are kept for as long as tax law requires, and that part is not ours to waive.

You also have the right to complain to a data protection supervisory authority, in particular in the country where you live or work.

Links away from here

Some links, on this site and in the app, leave with an attribution parameter attached so the other end can see the traffic in its own analytics. Once you have left, that site’s privacy policy applies and this one does not. The link that opens NotchClip after a purchase carries your licence key, so it stays in your browser’s history until you clear it.

Who you are dealing with

NotchClip is operated by Dmytro Virych, based in City, Country. Payments are taken by Creem, acting as merchant of record — they charge the card, handle sales tax and VAT where it applies, and are the name that appears on your statement. These terms are governed by the law of Your Country. If you buy as a consumer, that choice never takes away the protection of the mandatory law of the country you live in, and you can bring a claim in the courts there. The seller’s full details are on the legal notice.

Getting in touch

Questions, corrections, a problem with a payment, or a request to have your data deleted — write to hello@notchclip.buildmac.app. A person answers, within three business days.