NotchDock Privacy Policy

1. Data Collection & Storage

All configurations, preferences, and workspace components are stored safely on your machine. Specifically:

• Sports Module: Favorite teams, layout preferences, and pinned game IDs are stored locally in macOS UserDefaults. No sports tracking or personal data is collected.
• Stocks Module: Watchlist tickers and custom names are saved locally in macOS UserDefaults.
• ToDo List & Quick Access: Snippets, tasks, and notes are stored entirely on your local filesystem and within standard local app sandbox directories.
• Calendar & Reminders: Access is requested using macOS's native EventKit APIs. Event metadata (titles, timings, participants) is queried on-demand and processed strictly in-memory. This data is never written to disk by NotchDock or uploaded.

2. Network & API Integrations

To display live updates on your notch widgets, the app securely requests data directly from third-party public endpoints:

• Sports Live Scores: Scores are requested directly from public ESPN API endpoints over HTTPS. Requests are read-only and contain no user identity or tracking tokens.
• Stock Market Data: Financial tickers are fetched directly from Yahoo Finance public APIs over HTTPS. No API keys or account log-ins are utilized.

Connections to these external APIs are direct from your device to the service provider, governed by their respective privacy terms. We implement client-side rate limits to prevent endpoint abuse.

3. Permissions & Sandboxing

NotchDock requests minimal OS entitlements to perform its duties:

• Network: Required to query sports scores and stock tickers.
• Calendar & Reminders: Requested only if you enable the Calendar/ToDo modules to view upcoming events.
• Launch at Login: Registered locally through macOS ServiceManagement APIs (SMAppService) if toggled by you.

4. Diagnostics & Logs

To assist in debugging and stability monitoring, the app includes a diagnostic logger:

• All log records are kept in a local, volatile buffer.
• Sensitive strings, credentials, or custom user text are automatically redacted in-memory as [REDACTED SENSITIVE DATA].
• Diagnostics are only shared if you manually export the logs from the Support settings and upload/send them to us for troubleshooting.

5. No Analytics or Advertisements

NotchDock does not include third-party advertising SDKs, session recording, or marketing telemetry platforms. We do not track your clicks, usage duration, or feature interactions.

6. Website visit and download measurement

The website uses a random identifier in session storage for up to 30 minutes to count a visit and at most one download-button session. It records a campaign/source label, landing-page path without queries, coarse device category and date. It does not collect app content, email addresses, full referrer URLs or a cross-site advertising identifier.

Events are stored through the website's Netlify hosting. Records are deleted daily after 30 days. The site respects Do Not Track and Global Privacy Control signals. Netlify may process standard request information, including IP addresses, to operate and protect the hosting; the campaign event store does not retain IP addresses.

A download-button event does not prove a completed download, installation or unique user. This website measurement is separate from the app's local workspace and optional user-supplied diagnostics.

7. Contact & Support

If you have any questions or concerns about this policy or the application's design, you can contact us at:

• GitHub Repository: github.com/rohanrony/notchdock
• Support Email: notchdock@gmail.com