Privacy policy

Last updated: 26 October 2026

1. The short version

The notabs app keeps your notes, your window titles and your clipboard history on your Mac. There is no account, no cloud and no analytics in the app. The website notabs.app uses Google Analytics only if you accept it in the banner; until then it sets no cookies and loads nothing from Google.

2. Controller

snekmedia GmbH, Paulustorgasse 8, 8010 Graz, Austria, office@snekmedia.com. Full company details are in our imprint.

3. The notabs app

Notes. Your Notes and the dated daily notes are plain Markdown files in a folder you choose on your Mac (or in your Obsidian vault). We never receive them.
Windows. With the Accessibility permission, notabs brings each window to the front and closes, minimizes or quits it when you tell it to. With the Screen Recording permission it reads window titles, so each note says which window it was about. Nothing on your screen is recorded, stored or sent anywhere.
Clipboard history. notabs keeps what you copied in the last 24 hours, on your Mac only. Items that apps mark as concealed or transient, such as passwords from a password manager, are never kept.
Updates. notabs checks notabs.app for updates and downloads the ones you install. These requests reach our servers with your IP address and the app's version, like any web request, and are handled as described in section 4.
License key. Your license key is checked offline, inside the app. Nothing is sent to us to activate it.
Optional herdr integration. Off by default. If you switch it on, notabs sends herdr session titles, tab labels, project names, the start of each session's first prompt and feature names and summaries to your own Cloudflare Workers AI account, using your credentials. That data goes to Cloudflare under your account and never through us. Terminal output never leaves your Mac.

4. The website and downloads (Cloudflare)

notabs.app, the app downloads and the update feed are hosted by Cloudflare (Cloudflare, Inc. and Cloudflare Germany GmbH). When you visit the site or the app checks for updates, Cloudflare processes technical connection data (such as IP address, time, requested URL and user agent) to deliver the content securely and defend against attacks. Legal basis: our legitimate interest in a secure, working website and update service (Art. 6(1)(f) GDPR). Cloudflare acts as our processor under a data processing agreement; transfers to the USA are covered by the EU–U.S. Data Privacy Framework and Standard Contractual Clauses.

5. Analytics, only with your consent (Google Analytics 4)

We use Google Analytics 4 (Google Ireland Ltd.) to understand how visitors use the website, for example how many people click the trial button, so we can improve it. Analytics loads only after you click "Accept" in the banner. Before that, no request is made to Google and no cookie is set.

With your consent, Google Analytics sets cookies with a pseudonymous identifier and records page views and clicks on the trial, notify and buy buttons. Google shortens IP addresses in the EU.

Legal basis: your consent (Art. 6(1)(a) GDPR; §165(3) TKG 2021 for storing and reading cookies). Google LLC may process data in the USA; Google is certified under the EU–U.S. Data Privacy Framework and also relies on Standard Contractual Clauses. Retention follows our Google Analytics settings (14 months).

You can withdraw your consent at any time with "Cookie settings" at the bottom of every page, or by clearing this site's data in your browser. Your choice is stored only in your browser (localStorage), not on our servers.

6. Cookies and local storage

Without your consent, the website sets no cookies. A small entry in your browser's local storage remembers your analytics choice so we don't ask on every visit; it is strictly necessary and never sent to us. Fonts come from your own device; no other third-party content is loaded.

7. Email

If you write to us, we use your email address and message only to answer you (Art. 6(1)(b) or (f) GDPR) and delete the correspondence when it's no longer needed, unless we have to keep it by law.

8. Purchases

The checkout is not open yet. Before we sell the first license, we will update this policy to describe the payment provider and how your license key is delivered.

9. Recipients

We share data only with the processors named above (Cloudflare, and Google if you accept analytics) and with authorities where the law requires it. We don't sell your data.

10. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection, and to withdraw any consent with effect for the future. Write to office@snekmedia.com. You can also lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde, dsb.gv.at).