Privacy Policy

Effective date: July 13, 2026 · Operator: CaughtShipping ("we", "us", "our") · Contact: [email protected]

1. Introduction

This Privacy Policy explains what information CaughtShipping collects, why, and what you can do about it. CaughtShipping is a voluntary commitment device: you declare your own downtime hours and watched apps, and we log whether you kept to them. We designed the Service around collecting as little as possible to do that job.

2. Information We Collect

We collect:

  • Account information: your email address, and if you sign in with X, the identifiers X provides for that login.
  • Profile information (public): your handle, display name, and any socials you add are published on your public profile.
  • Event metadata: which watched app came to the foreground, and the timestamp and duration of that event, but only during your declared downtime.
  • Device and sync identifiers, used to keep your configuration and streaks in sync across devices.
  • Streak and violation ("falls") data: Streaks and blotter entries (falls) are published automatically — public display is a core function of the service, performed with your consent given at account creation.
  • Billing information: once billing is live, a Stripe customer ID and your subscription status.

3. What We Do NOT Collect

This is a core promise of the product, not fine print: we never collect window titles, file names, URLs, keystrokes, screenshots, or any continuous stream of your activity. We only ever see that a watched app was in the foreground, when, and for how long — during downtime, after your grace period. Time spent with your screen locked or your device asleep counts as clean and generates no record at all.

4. Local Data Storage

Your downtime schedule, watched apps list, mode, and grace period are configured and stored locally on your device by the desktop app. Only the data described in Section 2 is sent to our servers.

5. How We Use Your Information

We use this information to run the Service: authenticating you, detecting violations against your own declared schedule, maintaining your streaks, operating the public Wall of Rest and Blotter, which every account participates in, processing subscription payments, and communicating with you about your account.

6. Cookies & Analytics

Our website uses Google Analytics (GA4) to understand how visitors use the site. Google Analytics sets cookies and collects standard web analytics data (such as pages visited and general usage patterns). We do not use this data to profile individual users beyond what Google Analytics provides.

We manage cookie consent with ConsentLayer, and how analytics behaves depends on where you are. In the EU/EEA, Google Analytics is blocked until you opt in — no analytics cookies are set unless you accept. In California, analytics runs by default, you can opt out at any time, and we honor Global Privacy Control (GPC) signals your browser sends. Everywhere else, analytics runs by default. Wherever you are, you can review or change your choice using the cookie preferences control on the site, or by emailing us at [email protected].

The table below lists every cookie and service currently in use. It is generated from our live consent configuration, so it stays accurate as things change.

7. Data Sharing & Subprocessors

We do not sell your personal information. We share data only with the service providers we rely on to run CaughtShipping:

  • Stripe — processes subscription payments. Stripe receives your payment details directly; we only receive a customer ID and subscription status.
  • Google Analytics — provides website analytics, as described above.
  • Our email delivery provider — sends magic-link sign-in emails.
  • Our cloud hosting provider — hosts our servers and databases.

Each of these providers only receives the data it needs to perform its function for us.

8. Data Retention & Deletion

We retain your data for as long as your account is active. You may request deletion of your account at any time by contacting us; we purge your public history, falls, cards, and personal data within 24 hours of your request.

9. Your Rights

CaughtShipping is governed by the laws of England and Wales, and we honor the data rights that come with that: you have the right to access the personal data we hold about you, request correction of inaccurate data, request deletion, and object to certain processing. To exercise any of these rights, contact us at [email protected].

10. Security

We take reasonable technical and organizational measures to protect your data, including encryption in transit and access controls on our systems. No method of transmission or storage is completely secure, and we can't guarantee absolute security.

11. Children

CaughtShipping is not directed to, and we do not knowingly collect personal information from, anyone under 16 years old. If you believe a child has provided us with personal information, please contact us and we'll delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we'll make a reasonable effort to notify you before they take effect.

13. Contact

Questions about this Privacy Policy, or want to exercise a data right? Reach us at [email protected].

See also our Terms of Service.