1. The app itself collects nothing
The FloatyNote macOS app is fully offline. Your note is stored as a plain .txt file on your own Mac. There is no account, no cloud sync, no telemetry, and the app makes no network connection except to check for updates and to download an update you choose to install. This privacy policy therefore concerns the website floatynote.com and the purchase process, not your notes.
2. Controller
snekmedia GmbH, Paulustorgasse 8, 8010 Graz, Austria — [email protected]. See our Legal Notice for full company details.
3. Hosting & server logs (Cloudflare)
The website and its download/checkout backend run on Cloudflare (Cloudflare, Inc. and Cloudflare Germany GmbH). When you visit, Cloudflare processes technical connection data (e.g. IP address, request time, user agent) to deliver the site securely and defend against attacks. Legal basis: our legitimate interest in a secure, functioning website (Art. 6(1)(f) GDPR). Cloudflare acts as our processor under a data processing agreement.
4. Analytics — only with your consent (Google Analytics 4)
We use Google Analytics 4 (Google Ireland Ltd.) to understand how visitors use the site so we can improve it. Analytics only loads after you click “Accept” in our cookie banner — before that, no Google request is made and no cookie is set. Analytics cookies store a pseudonymous identifier and record events such as page views and clicks on the download and buy buttons.
- Legal basis: your consent (Art. 6(1)(a) GDPR; §165 Abs 3 TKG 2021 for storing/reading cookies).
- Transfer to the USA: Google LLC may process data in the USA. Google is certified under the EU–U.S. Data Privacy Framework and additionally relies on the EU Standard Contractual Clauses.
- Withdraw consent at any time: click “Decline” when the banner appears, or clear this site’s data in your browser to be asked again. Your choice is stored only in your browser (localStorage), not on our servers.
- Retention: analytics data is retained per our GA4 settings (default 14 months).
5. Purchases & invoicing (Stripe)
When you buy a license, payment is handled by Stripe (Stripe Payments Europe, Ltd.; Stripe, Inc., USA). To process the sale, Stripe collects the data you enter at checkout — name, email, billing address, payment details, and, for business buyers, a VAT ID. We receive your email address (to send the license) and order metadata; we never see your full card number. Stripe also generates your VAT invoice.
- Legal basis: performance of the purchase contract (Art. 6(1)(b) GDPR) and compliance with tax-retention obligations (Art. 6(1)(c) GDPR).
- Transfer to the USA: covered by the EU–U.S. Data Privacy Framework and Standard Contractual Clauses.
- Retention: invoice and order records are kept for the statutory retention period (7 years under §132 BAO).
- See Stripe’s privacy policy: stripe.com/privacy.
6. License delivery email (Resend)
Your license key is emailed via Resend (Resend, Inc., USA), our email-sending processor. Only your email address and the message content are processed, to fulfil your order (Art. 6(1)(b) GDPR), under a data processing agreement and Standard Contractual Clauses.
7. Recipients
We share data only with the processors named above (Cloudflare, Google, Stripe, Resend) and with authorities where legally required. We do not sell your data.
8. Your rights
You have the right to access, rectification, erasure, restriction, data portability, and objection, and the right to withdraw consent at any time with future effect. To exercise them, email [email protected]. You also have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde, dsb.gv.at).
9. Cookies
We set no non-essential cookies before consent. Only if you accept analytics does Google Analytics set its cookies. A small first-party entry in your browser’s localStorage remembers your consent choice so we don’t ask on every visit; this is strictly necessary and set on the basis of our legitimate interest.