Privacy policy

Updated 28 July 2026

Stray Finds is built to keep your data on your Mac. This policy describes the little that ever leaves it. The data controller is Caboche, a Belgian sole proprietorship (hello@strayfinds.com, full identity in the legal notice).

The short version

The app has no accounts, no telemetry, and no ads. Your memos live in a database file on your Mac and are never sent to us. The only times any data leaves your machine: paying for a license (handled by Polar), activating a license or starting a trial (our small licensing service), AI classification (sent to the model provider, not to us), and emailing us. This website, separately, counts its visits with a cookieless analytics service, described below.

The app and your memos

Everything you capture is stored in a SQLite file on your Mac, in a folder you choose. We have no access to it and no copy of it. The app sends no usage data or crash reports.

AI classification

When a capture is classified with the included AI, its content is sent from your Mac directly to OpenRouter, Inc. (United States), the model gateway, using a key tied to a pseudonymous customer reference. The key carries no name or email. The content does not pass through our servers and we never receive it. OpenRouter processes it under its own privacy policy. If you connect your own AI provider key instead, content goes to that provider under your own account and our service is not involved at all.

Purchases

Polar Software Inc. is the merchant of record and the seller of your purchase. Polar collects and processes your email address, billing country, and payment details under its own privacy policy. We can see your email and order details in Polar's merchant dashboard in order to provide support and manage licenses.

License activation and the free trial

• Activation: your license key is validated with Polar, and your Mac's computer name is used as the activation label so you can recognize your devices when managing them. Our licensing service stores a pseudonymous customer reference, an order reference, and the AI key it created for you. It stores no name and no email.
• Trial: the app generates a random install identifier and our service records it together with your IP address, which we use only to enforce daily limits that prevent abuse of the free AI allowance (legitimate interest). These records are kept only as long as the abuse-prevention purpose requires.

This website

This site sets no cookies and stores nothing in your browser, which is why it has no cookie banner. It is served by Cloudflare, which processes IP addresses as any host does to deliver and protect the site. The displayed price is localized from your country, derived from your IP for that request only. Nothing about it is stored.

We do measure how the site is doing, with Umami (Umami Software, Inc.), a cookieless analytics service acting as our processor. The legal basis is our legitimate interest in knowing whether the site works and which links bring people to it. It records the page you looked at, the site or link that sent you there, whether you clicked a download button, and your browser, operating system, device type, screen size, language and country. Your IP address and browser details are used only to compute a hash that counts you as one visitor for the day; that hash is rebuilt from a new secret every day, your IP address itself is not stored, and none of it identifies you or follows you to other sites. The resulting statistics are kept for six months. Umami states its practices in its own privacy policy. Any content blocker stops it, and the site works exactly the same without it.

Email

If you write to hello@strayfinds.com, we keep the correspondence for as long as needed to help you.

International transfers

OpenRouter, Cloudflare and Umami are US companies. Where personal data reaches them, transfers rely on the safeguards they provide under EU law (such as the EU-US Data Privacy Framework or standard contractual clauses, as applicable).

Your rights

Under the GDPR you can ask for access to, correction of, or deletion of personal data we hold, object to or restrict its processing, and ask for a copy. Write to hello@strayfinds.com. You can also lodge a complaint with the Belgian Data Protection Authority.

Changes

If this policy changes, the new version is published here with an updated date.