In short
Ambrel is a library that lives on your Mac. Your captures, links, boards, tags and the text Ambrel reads from them never leave it. There are no analytics, ads or tracking, neither in the app nor on this site.
To run a trial and a license, a few things do travel. This page lists every one of them.
Who is responsible
Jorge Grima, Spain, is responsible for the data described here. For anything about your data, contact us through our support form.
What stays on your Mac
Everything you save, and everything Ambrel works out from it: the text inside images, their colours, what they look like and your organisation. It’s all processed on your Mac with Apple’s frameworks and stored there. We never receive it.
What the app sends
- Trial. When you first open Ambrel, it sends our license server a device identifier, the app version and build. The identifier is a one-way hash of your Mac’s hardware ID, salted for Ambrel, so it can’t identify your Mac anywhere else. It stops a reinstall from restarting the trial.
- License. When you activate, and then about once a day, Ambrel sends your license key, the same device identifier, your Mac’s name and model, and the app version. The name and model are only there so you can recognise your Macs when you deactivate one.
- Updates. Ambrel checks for new versions by reading a feed on ambrel.app. It sends no system profile, only the usual details of any web request.
- Saved links. To show a link’s icon, Ambrel asks Google’s favicon service for it, sending only the site’s domain. To build the preview, it loads the page you saved from that site, as a browser would.
What our license server stores
For each license: the email and name from the purchase, the license key, the hashed device identifier, the name and model of each active Mac, the app version and the relevant timestamps (purchase, activation, last check, updates end). For each trial: the hashed device identifier, the app version and its start and end dates.
Who else is involved
- Paddle is the Merchant of Record for every purchase. It collects your payment and billing details under its own privacy policy and passes us only what we need to issue your license.
- Resend sends our emails: your license key, renewal confirmations and lost-key requests. It receives your address and the content of those emails.
We don’t sell or share your data with anyone else.
This website
This site sets no cookies and runs no analytics. It remembers your language choice in your browser’s local storage, and reads the release feed on ambrel.app to show the current version.
When a price is shown or you open the checkout, the site loads Paddle.js from Paddle’s servers, and Paddle may set what it needs to process the payment. Our hosting keeps standard access logs (IP address, page, time) for a short period, for security.
Support conversations
When you open the support panel, it connects to our support system, JGDashboard. We store your messages, our replies and any email you choose to provide to handle your request. Your browser keeps a session token in local storage so you can return to your conversations. The panel does not track visits or enable analytics.
We keep conversations as needed to resolve your request and follow up. You can request deletion through the panel.
Why we may use it
- To provide what you bought: issuing, activating and recovering licenses, and sending their emails.
- Our legitimate interest in preventing abuse: keeping trials from restarting and keeping the service secure.
- Legal obligations, such as the tax records Paddle keeps as the seller.
How long we keep it
License data is kept for as long as the license exists, since it’s perpetual and we need it to verify and recover your key. Activation details are deleted when you deactivate a Mac. Trial records are kept only as long as they’re needed to prevent trial resets. You can ask us to delete your license at any time; after that it can no longer be verified or recovered.
Your rights
You can ask to access, correct, delete or export your data, or to restrict or object to how it’s used. Contact us through our support form. You can also complain to the Spanish data protection authority, the AEPD.
Paddle and Resend may process data outside the European Economic Area. When they do, it’s under the European Commission’s standard contractual clauses.
If this policy changes, the date above will change with it.