Privacy Policy

Last updated: 10 October 2026

This policy explains how ROUNDRECT PTY LTD (trading as Round Rect), the provider of Shady Notes, handles personal information when you visit shadynotes.app and its documentation, use the app, create an account, purchase a subscription, or contact us. For privacy questions and requests, email [email protected].

1. Your notes and the macOS app

Your notes are stored as markdown files in a folder you choose on your Mac. Account and payment services do not require access to the contents of those files. Files may be processed by services you choose yourself, such as a cloud-synced folder, a plugin, or another application. Those services have their own privacy practices. The app may connect to online services for account authentication, licensing, downloads, and updates; local file storage does not mean the app makes no network connections.

2. Information we handle

  • Accounts and subscriptions: information you supply when signing in or paying, such as your email address, account identifiers, billing information, and subscription status.
  • Support: your contact information, messages, and any files or diagnostic details you choose to send. Please avoid including private notes or payment credentials.
  • Website requests: technical information needed to deliver and protect the website, such as IP address, browser and device information, requested URL, and request time. Hosting and service providers may process this information in operational or security logs.
  • Advertising, where enabled: cookie identifiers, IP addresses, device and browser information, ad impressions, interactions, and consent choices, as described below.

3. Why we use information

We use information to deliver the website and app services, authenticate accounts, manage subscriptions, answer support requests, prevent fraud and abuse, maintain security, and meet legal obligations. Where advertising is enabled, advertising providers use information to deliver, measure, and, when permitted, personalise ads. Where applicable law requires a legal basis, these activities rely on providing the service you requested, legal obligations, legitimate interests in operating and protecting our services, or your consent for activities that require it.

4. Service providers and sharing

We use Clerk for authentication and subscription management and Stripe for payment processing. Payment details are handled through payment providers; do not send card details to our support email. See Clerk’s Privacy Policy and Stripe’s Privacy Policy. Hosting and delivery providers process information needed to serve the website and downloads. We may also disclose information when legally required, to protect rights or security, or in connection with a business transfer subject to appropriate safeguards.

5. Cookies, local storage, and website analytics

Cookies and similar browser storage may be used for authentication, security, preferences, and consent choices. The app stores settings locally on your Mac. We have not added a separate website analytics service or AdSense ad code in the current website implementation. If advertising is enabled, the disclosures in the next section apply. Browser settings let you delete or block cookies; blocking necessary storage may affect sign-in and other functionality.

6. Google AdSense and advertising cookies

When we display ads through Google AdSense, third-party vendors, including Google, may use cookies to serve ads based on your previous visits to this website or other websites. Google’s advertising cookies allow Google and its partners to personalise advertising using browsing activity, subject to your choices and applicable law.

Third parties may place or read cookies, use web beacons, or collect IP addresses and similar identifiers as a result of ad serving. These technologies can support ad delivery, frequency limits, measurement, fraud prevention, and personalisation. Other advertising vendors or networks participating through Google may also use these technologies. Their identities and purposes should be available in the advertising consent message and its vendor list when advertising is enabled.

Learn how Google processes information at How Google uses information from sites or apps that use its services and Google’s Privacy Policy. Manage Google personalised advertising at My Ad Center. You can also explore participating third-party advertising choices at YourAdChoices or Your Online Choices. Opting out of personalisation does not necessarily remove ads or all cookies, and choices may be specific to a browser or device.

7. Consent and advertising choices

Where required, we must obtain consent before using advertising cookies or personal data for personalised advertising. When advertising is enabled, use the consent message and its privacy-settings control to accept, reject, or revisit your choices. Withdrawing consent does not affect processing already performed lawfully. Non-personalised ads can also use storage for functions such as measurement or fraud prevention and may still require consent. We do not treat this policy itself as consent.

For users in the European Economic Area, United Kingdom, and Switzerland, Google advertising must be configured with the applicable consent management requirements before ads are served. Where applicable US state laws give you a right to opt out of sale, sharing, or targeted advertising, use the advertising privacy controls when available or contact us. Advertising identifiers may be treated as a sale or sharing under those laws even when no money is exchanged directly for personal information.

8. Retention, security, and international processing

We retain information for as long as needed for the purposes described here, including providing your account, handling support, preventing abuse, resolving disputes, and meeting tax or other legal requirements. Retention varies by information type and provider. Deleting an account does not necessarily remove records we are legally required to keep. Your local notes remain under your control.

We use reasonable technical and organisational measures to protect information, but no system is completely secure. Providers may process information outside your country. Where applicable, international transfers require appropriate safeguards under relevant data protection law; provider policies describe their transfer arrangements.

9. Your privacy rights and complaints

Depending on your location and applicable law, you may have rights to access, correct, delete, or obtain a copy of personal information, restrict or object to processing, withdraw consent, or opt out of certain advertising uses. You may also have a right to appeal a denied request and to receive equal treatment for exercising privacy rights. Contact [email protected]; tell us the service and request involved. We may need to verify your identity and will respond within the time required by applicable law. An authorised agent may submit a request subject to verification where required.

If a concern is unresolved, you may complain to your local data protection authority. In Australia, see the Office of the Australian Information Commissioner. Local notes can be exported or deleted directly through your files; we cannot delete files from your Mac remotely.

10. Children

Our services are intended for a general audience and are not directed to children under 13. If you believe a child has supplied personal information to us without the necessary authorisation, contact us so we can investigate and address it.

11. Changes and contact

We will update this page when our practices change and revise the date above. Where required, we will provide additional notice or seek fresh consent for material changes. Contact ROUNDRECT PTY LTD (Round Rect) at [email protected] with questions, requests, or complaints.