Privacy Policy.

1. Who We Are

Notch is developed by Alexander Lukashov, an independent software author based in Belgrade, Serbia. He is the controller of the personal data described here. Contact details are in Section 17.

2. In Short

• Recording and editing happen on your computer. A recording is uploaded only when you choose Quick share or Publish.
• To keep your Links you sign in with your email address. We store that address and your Links.
• The app sends an update check and a small set of usage counters, tied to a random install id, never to your recordings.
• We count Link views without identifying the people who watch.
• We do not sell your data or use it for advertising.

3. The Desktop App

3.1 Recording stays on your computer. Your recordings, project files, and exports stay on your machine. We never receive them unless you choose Quick share or Publish (Section 5). Speech-to-text for captions runs on your computer.

3.2 Update check. When you launch Notch, the app sends a small request to our update server (update.getnotch.co) to find out whether a newer version is available. This request contains:

• A randomly generated install identifier (UUID), created the first time you launch the app and stored locally. On its own it is not tied to your name or email.
• Operating system family and major version (for example, "mac 15" or "win 11").
• CPU architecture ("arm64" or "x64").
• Currently installed app version (major / minor / patch).
• Plan (today always "free").
• Build type ("release" or "dev"), so test builds can be told apart from real installs.

We use this to show release notes for your version, to see which systems are still in use, and to count distinct installs. The update service runs on Cloudflare, and the same fields are sent to PostHog for install statistics (Section 9).

3.3 Usage counters. Each time the app starts, it sends our cloud service a short report tied to the same install identifier: the date the app was first launched, the app version, running totals such as how many recording segments were saved and how many exports or uploads failed (with technical error codes), and how long recent publishes took. These numbers tell us whether recording and publishing work reliably. They never contain any part of a recording, its title, file names, or what was on your screen.

3.4 Other requests. Some screens in the app fetch current plan information from getnotch.co/pricing.json. Installers (.dmg / .exe) and the release manifest (latest.json) are fetched from download.getnotch.co. These are plain requests with no personal data in them; as with any web visit, the server sees your IP address.

3.5 After an export. From Notch 2.1, when an export starts, the app asks our cloud service whether there is a short message to show once the export finishes, such as a one-question survey or an invitation. The request carries the random install identifier, the app version, your platform, whether Notch was installed from the Microsoft Store or directly, whether you are signed in, and the length and format of the export. It never carries the recording, its title or file names. If a message appears, what you do with it (a rating, a yes or no, a button you click, closing it, or an email address you choose to submit) is recorded in PostHog (Section 9) tied to the same install identifier. The app shows such a message at most once per session and then waits at least 14 days.

3.6 What the app does not send. No recording content unless you publish it, no clipboard or file contents, no keystrokes, no contacts, and no device hostname. We do not track which buttons you click.

The update check and the counters have no in-app off switch. If you want to stop them, block traffic to update.getnotch.co and to our cloud service at the network level. Recording, editing, and exporting keep working offline.

4. Accounts

You do not need an account to record, edit, or export. To keep the Links you publish, you sign in at app.getnotch.co (or from the app) with your email address. We send you a sign-in link by email. For an account we store:

• your email address;
• an account identifier we generate;
• your sign-in sessions, which expire after a while;
• the list of your Links and how much storage they use.

We use your email address to sign you in and to write to you about your account or important changes. Legal basis: performance of a contract (providing the account you asked for).

5. Recordings You Publish

When you choose Quick share or Publish, the app uploads the recording to our cloud service and creates a Link on notch.watch. For each Link we store:

• the recording files (screen video, audio, camera video if you used one) and a thumbnail;
• the title and the settings the page needs to play the recording as you edited it;
• the file sizes, the dates the Link was created and expires, and its state (for example, ready, deleted, or removed);
• the install identifier and app version that published it, and the account it belongs to, if any.

Recordings are stored in the European Union. Anyone who has a Link's address can watch it. Links are not listed anywhere, and search engines do not index them. Legal basis: performance of a contract (hosting the Links you asked us to host).

Links without an account. You can publish your first Links without an account. These are tied to your install identifier and expire after 30 days unless you sign in and keep them in an account. When a Link expires, we delete its recording.

6. People Who Watch a Link

When someone opens a Link, the page reports playback events: that the page opened, that playback started, how far it got, whether it stalled, whether it reached the end, and clicks on the button on the page. Each event carries a random identifier created for that one page load, the Link it belongs to, and the app version that made the recording. Nothing that identifies the viewer is stored with these events. We use them to count views and to find playback problems. As with any web page, Cloudflare processes the viewer's IP address to deliver the page. Legal basis: legitimate interest in running and improving the service.

7. Reports and Account Deletion Requests

Every Link page has a "Report it" link, and the dashboard has a "Delete account" link. Both open a Google Form. What you enter there, including any email address you give, is stored by Google and shared with us so we can act on it. Before deleting an account, we confirm the request by writing to the email address on that account. Legal basis: legitimate interest in keeping the service safe, and our legal obligations.

8. Email Lists

If you join a list in the app, for example the Pro waitlist after an export, we store your email address in PostHog (Section 9) together with the list and the date you joined, and use it only for what that list says (for the Pro waitlist: one email when Pro launches). You give your consent by submitting the address. To leave the list, email hello@getnotch.co and we delete your address.

9. Service Providers

We use the following providers to run Notch:

• Cloudflare runs our cloud service: the Link pages, the dashboard, the update service, and the storage for published recordings (Cloudflare R2, in its EU jurisdiction). It also stores the playback events and usage counters described above (Cloudflare Analytics Engine) and sends sign-in emails. See Cloudflare's Privacy Policy.
• FoxNose is our own database service, hosted in Germany (Frankfurt). It holds account records, Link records, install records, and the release notes the update check returns.
• PostHog is our product analytics service. It receives the update check fields from Section 3.2, what you do with a message after an export (Section 3.5), and a few events from our cloud service: that a Link was published, that a Link was kept in an account, that an account was created, how much storage an account uses, and when an account reaches its storage limit. These events carry Link identifiers and are tied to the random install identifier or to an account identifier, never to your email address (the only exception is an email list you join, Section 8), and location lookup is turned off. Our PostHog data is hosted in the European Union (eu.posthog.com). See PostHog's Privacy Policy.
• Plausible Analytics is a privacy-focused website analytics service used on this website (getnotch.co) only. Plausible does not use cookies or persistent identifiers. Limited technical data (page URL, referrer, browser type, country) and clicks on Download buttons are processed to produce aggregate statistics. No individual visitors are tracked or identified. See Plausible's Data Policy.
• Bunny.net delivers the app downloads (download.getnotch.co) and plays the demo videos on this website. See Bunny.net's Privacy Policy.
• Google (Google Forms) collects the reports and account deletion requests described in Section 7. See Google's Privacy Policy.
• Zoho Mail hosts our mailbox, hello@getnotch.co, so emails you send us are stored there. See Zoho's Privacy Policy.
• Fly.io hosts this website (getnotch.co) in Frankfurt, Germany. Its web servers keep standard access logs (IP address, requested page, browser type). See Fly.io's Privacy Policy.

10. International Transfers

Published recordings are stored in the European Union, and our PostHog and Plausible data stays in the European Union. Some providers above, such as Cloudflare and Google, are based in the United States or operate worldwide. Where data is transferred to countries that do not provide an equivalent level of data protection, we rely on the provider's standard contractual clauses or other appropriate safeguards as required by applicable law.

11. Cookies and Local Storage

This website (getnotch.co) does not set cookies, and our analytics provider (Plausible) is cookieless. The dashboard at app.getnotch.co uses a sign-in cookie, which is needed to keep you signed in, and remembers your layout choice in your browser's local storage. Link pages remember your light or dark theme choice in local storage. None of these are used for tracking or advertising.

12. Data Retention

• Account data is kept while your account exists and deleted when the account is deleted.
• Published recordings are kept until you delete the Link or your account, or until we remove the Link under our Terms. Links made without an account are deleted when they expire after 30 days. We do not keep backups of deleted recordings.
• Playback events and usage counters stored in Cloudflare Analytics Engine are deleted by Cloudflare after three months.
• Product analytics events in PostHog are kept for up to seven years. We can delete the events tied to your install or account on request.
• Email list addresses are kept until the list has served its purpose (for the Pro waitlist: until Pro launches and we have told you), or until you ask us to remove yours.
• Support correspondence is retained for six (6) months after resolution to provide continuity of service.

13. Data Security

We take reasonable technical and organizational measures to protect the personal data we hold against unauthorized access, loss, or misuse. Access to personal data is limited to us and the service providers listed above. In the unlikely event of a data breach affecting your personal data, we will notify you and the relevant supervisory authority as required by applicable law.

14. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access: request a copy of the personal data we hold about you.
• Correction: request correction of inaccurate or incomplete data.
• Deletion: request deletion of your personal data, subject to legal retention requirements. You can delete Links yourself in the dashboard, and request deletion of your whole account with "Delete account" there.
• Restriction: request restriction of processing in certain circumstances.
• Portability: request a machine-readable copy of data you provided to us.
• Objection: object to processing based on legitimate interests.
• Complaint: lodge a complaint with a supervisory authority. For users in Serbia, this is the Commissioner for Information of Public Importance and Personal Data Protection.

To exercise any of these rights, contact us at hello@getnotch.co. Data tied only to a random install identifier does not tell us who you are, so to act on it we may ask you for that identifier.

15. Children's Privacy

Notch is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will promptly delete it.

16. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. If a change materially affects people with an account, we will try to tell them by email or in the app.

17. Contact

If you have questions about this Privacy Policy or your personal data, please contact: