Privacy

The authoritative privacy policy (Datenschutzerklärung, German, per Art. 13 GDPR) lives on the Impressum page. In short:

What we process

Server logs at our host (Cloudflare) for security and operation; an account record (e-mail, password hash, or your Google/GitHub identity if you choose social sign-in) when you create one; e-mails you send us. Session cookies keep you signed in.

What we do not do

No advertising, no tracking pixels, no analytics scripts, no selling or sharing of data. Our products are local-first: your bookmarks, notes and files live on your devices or your own self-hosted server — not with us.

Our software: every outbound request

Our programs are local-first, and there is no analytics, telemetry or error reporting in them. This list names every connection our software can make. If it is not on this list, it does not happen.

• raystacks.com — update checks and downloads. Free programs — the Dashboard extension, the raystacks Launcher and the installer — check for updates and download anonymously: no account, no usage data; your IP is necessarily visible to serve the file. Only paid programs are tied to your account: installing one runs through your raystacks sign-in, because the download itself is what you purchased — those requests identify your account by design, and we keep no per-request records: no logs, no counters tied to you. Checking, downloading and installing are three separate steps and you choose which happen automatically.
• Favicons (optional, OFF by default): only if you switch on “Fetch icons from third-party services”, a site whose icon is missing locally is looked up at favicon.yandex.net, icons.duckduckgo.com, icon.horse and www.google.com, in that order. That sends the site’s hostname to whichever provider answers. The Recent Activity element has its own “Fetch favicons” switch (also off by default): with it on, the element first asks the visited site itself for its icon, and only asks the four providers above when the third-party switch is on too. Leave the switches off and none of these requests happens.
• YouTube (optional, OFF by default): saving a YouTube link can fetch that video’s details — watch length, title, channel, upload date, a short description, view count, the video’s own tags and category. There are two paths and both are off unless you turn them on. With your own API key (Integrations tab) the data comes from www.googleapis.com, and thumbnails from i.ytimg.com. Without a key, and only if you switch on “Fetch video details when saving a YouTube bookmark”, the extension fetches the ordinary watch page at www.youtube.com — which shows YouTube your IP address and which video you saved. With no key and that switch off, YouTube is never contacted.
• Icon search (only when you use it, or with an opt-in): searching for a tag icon sends your search term to api.iconify.design. If you additionally switch on “Fetch icons for tags when tags are created” (off by default), the name of each newly created tag is sent there once, to look up a matching icon.
• Searches you start: the search bar opens the engines and AI services you picked (DuckDuckGo, Wikipedia, YouTube, ChatGPT, Claude, Perplexity, …). That is an ordinary page visit you trigger; their own privacy policies apply.
• Your own Launcher: when the extension connects to your Launcher it talks to the address you entered — your machine or your server. That data never reaches us.

Purchases

Payments are processed by Paddle as merchant of record; Paddle is an independent controller for checkout data — see Paddle's privacy policy.

Your rights

Access, rectification, erasure, restriction, portability, objection — write to contact@raystacks.com. Details in the full policy.