Privacy Policy

1. Scope and privacy contact

This policy covers the CAT-CH app and website. The CAT-CH operator identified on this page is the controller. Send privacy questions and requests to the contact on this page. Providers’ own policies also apply where they process information for their own purposes.

2. Clips and files on your Mac

Text, images, filenames, paths, file references and shelf settings are stored locally. Choosing to store a copy creates a local file or folder copy. CAT-CH does not upload these clips or stored files to its servers or PostHog. You can disable automatic collection.

Retrieving an original web image contacts its source address directly. That server can receive your IP address and requested URL. Cookie handling is disabled for these requests.

3. Website Google sign-in

When you sign in to the website, Google provides an account identifier, email address, email verification status and display name. We use them for sign-in, purchase association and download access. We do not receive your Google password. The website uses an expiring session cookie. The current Mac app has no sign-in or stored account or license session.

4. Purchases and downloads

We send your email, display name and checkout identifier to Lemon Squeezy to create checkout. Payment details are entered in its checkout; our database does not store complete card numbers.

We retain account-linked order identifiers, plan, status, amount, currency, purchase date and access rights for delivery, receipts, downloads and refunds. The current Mac app does not send license keys or device activation information.

5. Support requests

We use your email, message, order information and app or device details you choose to share to respond to support requests and resolve problems. We retain them while needed to resolve and follow up on the request, keeping only necessary records separately where a dispute or statutory retention duty applies. Do not send clip contents, passwords or full card numbers.

6. Optional website analytics

Website analytics is off by default. With permission, PostHog receives event times, referral categories, page types, purchase-button clicks, plan selections, checkout starts, and completed purchase amounts and currencies. Properties may include browser, device category, language and plan. The current Mac app does not collect or send app-launch or feature-usage analytics.

Random identifiers and a pseudonymous identifier derived from your Google account can connect website visits and purchases. Pseudonymous data is not fully anonymous. Cloudflare supplies country, region, city and continent estimated from your connection; we do not use GPS.

We exclude names, emails, clips, filenames, search text, license keys, full page URLs or queries, original IPs, coordinates and postal codes from PostHog events. Session recording, heatmaps and automatic screen-element capture are disabled.

7. Website cookies

• Sign-in cookie: up to 24 hours. Temporary sign-in security cookie: up to 10 minutes.
• Analytics choice cookie: 180 days, including refusal. Optional anonymous analytics identifier: 180 days.
• Analytics session: expires after 30 minutes without activity; renews after 23 hours of continuous use.
• Disabling website analytics clears the browser’s analytics identifier and session cookies. Blocking essential cookies may prevent sign-in.

8. Providers and international processing

Google supplies website sign-in; Lemon Squeezy handles checkout, receipts and downloads; Cloudflare hosts the website, server processing and database; PostHog supplies optional website analytics. Cloudflare processes connection information, including IP addresses, for requests and abuse prevention.

Analytics recipient: PostHog, Inc., privacy@posthog.com. Destination: United States. Purpose: website and purchase-flow analysis. Information: the analytics categories above. After consent, events travel through CAT-CH’s server over HTTPS when generated or retried. Retention follows the analytics project’s storage settings and deletion processing.

Other providers’ processing countries can depend on services and subprocessors. Request information about international processing and applicable safeguards through the contact on this page.

9. Purposes and legal bases

Where GDPR applies, website account, purchase, download and related support processing relies on contract performance or requested pre-contract steps (Article 6(1)(b)); necessary tax and other statutory compliance relies on legal obligations (c). Security, abuse prevention and legal claims rely on legitimate interests where justified against your rights (f). Optional analytics and its identifiers rely on consent (a).

Withdrawal does not invalidate earlier lawful processing. Other jurisdictions require a basis under their applicable laws. Analytics consent does not replace international-transfer requirements; separate notices or consent must be provided where required.

10. Retention and deletion

Local clips remain until you remove them or shelf limits remove them. Stored file copies remain after card deletion to protect other apps’ file references. Review and separately delete unwanted copies in the stored-files folder. Uninstalling the app or signing out of the website does not automatically delete them.

Signing out of the website does not erase server purchase records. Purchase retention reflects access delivery, refunds, disputes and applicable statutory requirements. Delivered analytics follows separate project retention settings. Send deletion requests or retention questions to the contact on this page.

11. Changing analytics choices

Use Cookie settings in the website footer to accept or reject website analytics at any time. The current Mac app has no usage analytics or separate analytics setting. Refusal does not reduce purchased features.

Website withdrawal stops new transmission and requests deletion of account-linked checkout analytics and unsent purchase events; network failure can prevent that deletion request completing. This setting stops new collection on the website; deleting queued server events takes effect when the server request succeeds. The switch does not automatically erase previously delivered records. You can also send erasure and withdrawal requests to the contact on this page. Where GDPR applies, personal data based solely on withdrawn consent must be erased without undue delay unless another retention ground applies; this right is not conditional on making an additional request.

12. Your rights

Subject to applicable law, request access, correction, erasure, restriction, portability, withdrawal or objection to processing based on legitimate interests through the contact on this page. We may request proportionate identity verification and apply statutory deadlines and exceptions.

You can complain to your local data protection authority, including Korea’s Personal Information Protection Commission or an EEA authority where you live, work or an infringement occurs. CAT-CH does not use analytics for automated decisions producing legal or similarly significant effects.

13. Security and policy changes

Website account, payment, download and analytics connections use HTTPS. We validate sessions and purchase notifications. Local clip files do not have separate app-level encryption; protect your Mac account and disk. Send only necessary information when requesting support.

Material changes will update this page and its revision date. We will provide advance notice or obtain additional consent where required by law.