Privacy
Short version: your content never does. This page is the long version, including the two places where something genuinely is sent, because a privacy policy that only lists the flattering parts isn't one.
OreoNotch has no sign-up, no login and no user identity. It contains no analytics library, no crash reporter that phones home on its own, and no advertising or tracking code of any kind. We do not have a database with your name in it, because we do not have your name.
All of the following is stored locally and is never transmitted by OreoNotch:
Password managers and similar apps mark what they put on the clipboard as concealed, transient or auto-generated. OreoNotch checks for those markers and skips those clips entirely — they are not written to the history, not even briefly held in memory for it. If your password manager marks its clips correctly, OreoNotch will not see them.
If you turn it on, your to-dos and notes sync between your own Macs using your iCloud account, in the private CloudKit database that belongs to you. It travels between your devices and Apple. It does not pass through any server of ours, and we have no ability to read it — not by policy, but because private CloudKit data is not visible to the developer at all. Turn sync off and nothing leaves the machine.
OreoNotch asks oreo.ziyarex.com whether a newer version exists. That
is an ordinary web request, so our host (Vercel) records what any web
server records: your IP address, the time, and the user agent, which
includes your current OreoNotch and macOS version. We use these logs only to
keep the site up and to know roughly how many people are running which
version. They are not joined to anything else, because there is nothing
else to join them to. You can turn automatic checking off in Settings, and
then no request is made unless you press the button yourself.
When you buy OreoNotch, the purchase is handled by whichever payments provider you bought through — Gumroad for cards, or Dodo Payments if you paid by UPI. Both act as merchant of record, which means they are the seller of record and handle the tax. They receive your email address and payment details — we never see the payment details. When you then activate your licence in the app, your licence key and an identifier for that Mac are sent to the provider who issued the key, and to no one else, so the licence can be checked and counted against your purchase. Nothing about how you use the app is included.
Which of the two your key belongs to is decided by the key itself, so the app never asks the provider you did not buy from.
Before you activate a licence nothing is sent at all, because there is no licence yet to check.
If you enable the Weather widget, macOS asks for permission to use your location, and your approximate coordinates are sent to Apple's WeatherKit to get a forecast for where you are. That exchange is between your Mac and Apple, under Apple's privacy policy. We never receive your location, and it is not stored anywhere by OreoNotch. Leave the widget off and permission is never requested.
OreoNotch can generate a diagnostics report to help with a support question. It is written to a file on your Mac and sent nowhere unless you choose to send it. It deliberately contains counts and states rather than content — how many to-dos you have, never what they say. The report lists its own omissions at the bottom, so you can see what was withheld before you send it, and you can read the whole thing first.
OreoNotch is a utility for macOS and is not directed at children. It collects no personal information from anyone, of any age.
If this policy changes in a way that affects what is sent from your Mac, the change will be listed in the changelog for the version it ships in, not quietly swapped in here.
Email saifsiddiqui2409@gmail.com and ask. If you want your purchase record deleted, say so and it will be — note that this also invalidates the licence it was for.