Privacy Policy

Last updated: April 2026

Overview

NotchPad is designed as a local-first Mac app. Your notes, snippets, and clipboard history are stored on your Mac, not in a NotchPad cloud account. This policy explains the limited cases where data may leave your device: website analytics, checkout attribution, Polar payments, license verification, Apple Notes sync that you enable, and software update checks.

App Data

The NotchPad Mac app does not include product analytics, advertising SDKs, or crash analytics. We do not operate a NotchPad account system. App data is handled as follows:

  • All notes, snippets, and clipboard history remain on your device.
  • Unlocked notes and regular clipboard items are stored locally in Application Support.
  • Locked notes and detected sensitive clipboard items are encrypted locally using keys stored in the macOS Keychain.
  • You can delete local app data from within the app where available, or by removing NotchPad data from your Mac.

Website Analytics and Attribution

Our website uses analytics and checkout attribution to understand which pages and sources lead to downloads, checkout clicks, completed purchases, or checkout drop-offs.

  • Vercel Analytics and Speed Insights collect aggregate website performance and visitor information. Vercel Analytics is designed to be cookieless and anonymized. See Vercel Web Analytics.
  • Google Analytics 4 (GA4) loads only if you accept analytics cookies. GA4 may process page views, referral source, approximate location, device/browser information, IP-derived data, and analytics cookies. See Google's Privacy Policy.
  • Checkout attribution stores app, product, clean landing path, clean checkout path, CTA identifier, UTM source/medium/campaign, referrer host, generated intent ID, and purchase/drop-off status. We intentionally strip arbitrary query strings from page paths.
  • Founder alerts may be sent to Telegram for completed sales and checkout drop-offs. These alerts intentionally exclude customer name, email, billing address, license key, notes, clipboard content, and Apple Notes content.

Checkout attribution records are stored in our private Vercel/Upstash storage with limited retention so we can understand aggregate landing-page and checkout performance.

Payments and Polar

Purchases are processed by Polar, our merchant of record and authorized reseller. When you buy NotchPad Pro, Polar may collect and store personal data such as your name, email address, billing address, payment metadata, tax or VAT details, IP/device data, and purchase history according to Polar's Privacy Policy and Polar Buyer Terms.

We may access order and customer details in Polar for support, refunds, license delivery, fraud prevention, accounting, and legal compliance. We do not send customer name, email address, billing address, or license keys to GA4, Telegram alerts, or public analytics.

Local Storage

All data created within NotchPad is stored locally using macOS-native storage mechanisms. This data never leaves your device unless you explicitly choose to export or share it.

Clipboard Access

NotchPad monitors your system clipboard to provide clipboard history functionality. This data is stored locally and is never transmitted externally. You can clear your clipboard history at any time from within the app.

Apple Notes Access

NotchPad can access your Apple Notes through macOS automation (AppleScript) if you grant permission. This allows you to browse, search, and edit Apple Notes from within NotchPad. Apple Notes content is stored and synced by Apple, not by NotchPad. NotchPad may display Apple Notes metadata, previews, and note content locally while you use the feature, but it does not transmit Apple Notes content to a NotchPad server. Edits made through NotchPad are written directly back to the Apple Notes app. If you have iCloud Notes enabled, changes sync through Apple's infrastructure according to Apple's privacy policy.

Touch ID / Biometric Data

NotchPad uses macOS biometric authentication (Touch ID) to lock individual notes. Biometric data is handled entirely by macOS and is never accessed or stored by NotchPad.

License Verification

When you enter a license key, NotchPad communicates with Polar to verify your license. This transmits your license key and a machine identifier used for activation limits. The app stores your license key in the macOS Keychain and may store license status, activation ID, validation timestamp, and the customer email returned by Polar locally on your Mac. Notes, snippets, clipboard content, and Apple Notes content are not sent to Polar for license verification.

Software Updates

NotchPad checks for software updates using Sparkle. Update checks may contact our appcast hosted through GitHub/Gist and may transmit basic technical information such as app version and macOS version so Sparkle can determine whether an update is available.

Data Retention

Local app data is stored on your device until you delete it. Checkout attribution records are retained for a limited operational period. Website analytics data is retained according to Vercel and Google Analytics settings. Polar may retain purchase and tax records as required for payment processing, accounting, tax, fraud prevention, and legal compliance.

Service Providers

Depending on how you interact with NotchPad, data may be processed by Vercel, Google Analytics, Polar, Upstash/Vercel KV, Telegram, GitHub/Gist, Sparkle, and Apple. These providers process data under their own terms and privacy policies where applicable.

Your Rights

Depending on your location, you may have rights regarding your personal data, including the right to access, correct, delete, or port your data.

  • App data: Since all app data is stored locally on your Mac, you have full control — you can view, export, or delete it at any time.
  • Website analytics: You may reject analytics cookies from our cookie banner or manage your analytics preference above.
  • California residents (CCPA/CPRA): We do not sell or share personal information for cross-context behavioral advertising.
  • EU/EEA residents (GDPR): Our legal bases include consent for GA4 analytics cookies, legitimate interests for privacy-safe site measurement and checkout attribution, contract performance for licensing and support, and legal obligations for payment, tax, and accounting records.

To exercise any rights, contact us at support@tinythings.app.

Children's Privacy

NotchPad is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

Governing Law

This Privacy Policy is governed by the laws of Singapore.

Changes to This Policy

We may update this policy from time to time. Any changes will be reflected on this page with an updated date.