What leaves your machine. What never does.

What we collect and why

We collect: account information — your email address, and if you sign in with X, the identifiers X provides for that login; profile information (public) — your handle, display name, and any socials you add are published on your public profile; event metadata — which watched app came to the foreground during your declared Curfew and the timestamp and duration of that event; hourly app-usage totals (Rested subscribers only) — for each hour, which app was in the foreground, how many seconds you were active in it, and your time zone, nothing finer; device and sync identifiers, used to keep your configuration and streaks in sync across devices; and streak and violation ("falls") data, published on the Wall of Rest and the Blotter for every signed-in account.

What we never collect

This is a core promise of the product, not fine print. On a free account we only ever see that a watched app was in the foreground during your Curfew, when, and for how long, after your grace period. If you subscribe to Rested, we also receive hourly totals: which app, how long, per hour. Your dashboard is built entirely from those hourly numbers; nothing more granular ever leaves your computer. Time with your screen locked or your device asleep is never counted as activity.

On every plan, we never collect window or tab titles, file names, project names, or anything inside your files, URLs or browsing history, keystrokes, screenshots or screen recordings, or a live or continuous stream of what you're doing.

Local storage & the free Reports window

Your Curfew window, watched apps, mode, and grace period are configured and stored locally on your device by the desktop app. On a Free account, the app also keeps a rolling 7-day Reports window entirely on your device: it covers the Overview view only, it's computed on your computer, and it is never sent to us. The Apps, Streak, and Rest report views, and anything older than 7 days, require Rested. You can turn the local counter off in the app's Settings at any time.

If you subscribe to Rested, the app additionally syncs finished-hour totals to your account, which is what builds the unlimited-history dashboard across all four report views. Only the data described in "What we collect and why" above is ever sent to our servers.

Contact & suggest-an-app forms

When you use the site's Contact form, or suggest an app for us to add to the watched-apps catalog, we store your message (and, for an app suggestion, the app name, platform, and category) in an internal admin table, together with the email you gave us (if any), your browser's user-agent string, and a one-way hash of your IP address. We never store your raw IP — only SHA-256(IP address + a private, per-deployment salt), which we use only for rate-limiting and abuse prevention, never to identify you.

We also email a copy of each submission to our own inbox, through our email delivery provider (Sequenzy) and Cloudflare Email Routing, so a human can read it and reply to you at the email you gave. Both forms are protected by Cloudflare Turnstile, which independently sees your IP address and the page you submitted from in order to verify you're not a bot — see "Data sharing & subprocessors" below.

How we use your information

We use this information to run the Service: authenticating you, detecting violations against your own declared Curfew, maintaining your streaks, operating the public Wall of Rest and Blotter, processing subscription payments, building the reports on your Rested dashboard, following up on Contact and Suggest-an-app submissions, communicating with you about your account, and sending product updates to our mailing list.

Cookies & analytics

Our website uses Google Analytics (GA4) to understand how visitors use the site. Google Analytics sets cookies and collects standard web analytics data (such as pages visited and general usage patterns). We do not use this data to profile individual users beyond what Google Analytics provides.

We manage cookie consent with ConsentLayer, and how analytics behaves depends on where you are. In the EU/EEA, Google Analytics is blocked until you opt in — no analytics cookies are set unless you accept. In California, analytics runs by default, you can opt out at any time, and we honor Global Privacy Control (GPC) signals your browser sends. Everywhere else, analytics runs by default. Wherever you are, you can review or change your choice using the cookie preferences control on the site, or by emailing us at [email protected].

The table below lists every cookie and service currently in use. It is generated from our live consent configuration, so it stays accurate as things change.

Data sharing & subprocessors

We do not sell your personal information. We share data only with the service providers we rely on to run CaughtShipping:

• Stripe — processes subscription payments made on the website. Stripe receives your payment details directly; we only receive a customer ID and subscription status.
• Apple — processes subscription payments made through the Mac App Store. Apple receives your payment details directly; we only receive Apple's subscription record for your purchase — transaction identifier, product, status, and expiry — never your Apple ID, email, or payment details. We use it to grant Rested on your account. Managing, cancelling, or refunding an App Store subscription is done through your Apple ID, not through us — see our Terms for how App Store billing works.
• Cloudflare Turnstile — verifies that Contact and Suggest-an-app submissions come from a real person, not a bot. It sees your IP address and the page hostname; it does not see your message.
• Google Analytics — provides website analytics, as described above.
• Our email delivery provider (Sequenzy) — sends magic-link sign-in emails, and holds our mailing list: when you create an account, your email is added to it so we can send you product updates. To stop those, contact us and we'll remove you.
• Our cloud hosting provider — hosts our servers and databases.

Each of these providers only receives the data it needs to perform its function for us.

Data retention & deletion

We retain your data for as long as your account is active. You may delete your account at any time from your account page, or by contacting us; we purge your public history, falls, cards, and personal data within 24 hours of your request. Hourly usage totals are kept while your account exists, so your history is still there if you resubscribe, and are deleted with your account.

Contact and Suggest-an-app submissions are retained for as long as reasonably needed to act on them. You can ask us to delete a specific submission by emailing us with enough detail (roughly when you sent it, and what it was about) for us to find it.

Your rights

CaughtShipping is governed by the laws of England and Wales, and we honor the data rights that come with that: you have the right to access the personal data we hold about you, request correction of inaccurate data, request deletion, and object to certain processing. To exercise any of these rights, contact us at [email protected].

Security

We take reasonable technical and organizational measures to protect your data, including encryption in transit and access controls on our systems. No method of transmission or storage is completely secure, and we can't guarantee absolute security.

Children

CaughtShipping is not directed to, and we do not knowingly collect personal information from, anyone under 16 years old. If you believe a child has provided us with personal information, please contact us and we'll delete it.

Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we'll make a reasonable effort to notify you before they take effect.

Effective date: July 13, 2026 · Last updated: September 27, 2026.

Contact

Questions about this Privacy Policy, or want to exercise a data right? Reach us at [email protected].